last executing test programs:

2m32.294675431s ago: executing program 0 (id=694):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0xff04, 0x0)

2m32.225135088s ago: executing program 0 (id=696):
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x200, @mcast2}, 0x80, 0x0}, 0xb80a)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$kcm(0x2b, 0x1, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x8, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
r4 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000640)={&(0x7f0000000000)={0x2a, 0x0, @broadcast}, 0x10, 0x0}, 0x0)
close(r4)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x890b, &(0x7f0000000100))
close(0x3)

2m32.07876317s ago: executing program 0 (id=701):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x0)
r1 = socket$kcm(0xa, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x0, 0x0, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
r2 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r2, 0x0, 0x0)
r3 = socket$kcm(0xa, 0x5, 0x0)
r4 = socket$kcm(0xa, 0x2, 0x3a)
sendmsg$kcm(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8916, &(0x7f0000000000)={r3})
r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000bf000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8936, &(0x7f0000000000)={r3})

2m31.564311618s ago: executing program 0 (id=711):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x18, 0x0, 0x0, &(0x7f0000000300)='GPL\x00', 0xa3c0, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000000100000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r0 = socket$kcm(0x2, 0x5, 0x84)
socket$kcm(0x18, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r1=>0xffffffffffffffff]}}], 0x18}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902})
write$cgroup_devices(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e03"], 0xffdd)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r3, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r4, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000001ec0)=""/4096, 0x1000}], 0x2}, 0x10000)
setsockopt$sock_attach_bpf(r0, 0x84, 0x76, &(0x7f0000000000)=r1, 0x8)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="cc0000001b0001032dbd7000fbdbdf25ac1414aa000000000000000000000000e00000010000000000000000000000004e2300004e"], 0xcc}}, 0x0)

2m31.507300999s ago: executing program 2 (id=712):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="d40a000040000000180000000000000000000000743039fe95"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x42}, 0x94)

2m31.507151877s ago: executing program 2 (id=713):
r0 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000000000001"], 0x40}, 0x20008024)

2m31.455353537s ago: executing program 2 (id=714):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20)
r1 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r1, &(0x7f00000008c0)={&(0x7f0000000780)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000800)="baa3", 0x2}], 0x1}, 0x400c000)
sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000180)="96f5", 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x0)

2m31.397025461s ago: executing program 2 (id=715):
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0}, 0x94)
socketpair(0x3, 0x80000, 0x1c7, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a0000000000000000018510000006000000180000", @ANYRES32, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'wg2\x00'})
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, 0x0, &(0x7f0000000600)=""/234}, 0x20)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
r3 = socket$kcm(0x21, 0x2, 0x2)
close(r3)

2m30.887067623s ago: executing program 2 (id=721):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="d8000000140081044ea1f782db44b904022008f130000000040000a118000200e014000e00000e1208000f0100030000000016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dbe5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e7ae4001b146222fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00d95667e0060000000000000080ca9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ff070dd68adb000000000000000000000083ea32baf4ef367516", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4040000)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r3, 0x0, 0x4, 0x0, 0x0)
sendmsg$inet(r3, 0x0, 0x24000000)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000004c0))
socket$kcm(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={r2, 0x0, 0x0}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000b40)={0x1, 0x58, &(0x7f0000000ac0)}, 0x10)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="240000001e006bcd9e3fe3dc6e08000007000000000000007ea60864160af36504005425", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50)
syz_clone(0x1e48c9600, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair(0x2a, 0x3, 0x10, &(0x7f00000002c0))
close(r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(r1, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @broadcast})
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10)

2m30.664759857s ago: executing program 2 (id=722):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f1400000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec001210000140090c0c00bdad446b9bbc7a46e39882a5dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0xff0f0000}, 0x0)

2m30.65847953s ago: executing program 0 (id=723):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x22, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket$nl_audit(0x10, 0x3, 0x9)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000080a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c7000000000000000000000000000000000800010054454500090002"], 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x24000840)
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x10000000}, 0x800, 0xc8, 0xffff, 0x7, 0xf9, 0xfffffffc, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffee7, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0xffffffffffffffae}, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
write$cgroup_subtree(r6, 0x0, 0xfdef)
sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000004d80)={0x0, 0x0, &(0x7f0000004d40)={&(0x7f0000004d00)={0x28, 0x3ea, 0x2, 0x70bd26, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}}, 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x2, 0x8, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}}, 0x0)
sendmsg$AUDIT_MAKE_EQUIV(r0, 0x0, 0x400c440)

2m30.463302077s ago: executing program 32 (id=722):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f1400000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec001210000140090c0c00bdad446b9bbc7a46e39882a5dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0xff0f0000}, 0x0)

2m29.605173142s ago: executing program 0 (id=725):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xfe}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x7c}, 0x1, 0x0, 0x0, 0x80040}, 0x24000000)

2m29.591552313s ago: executing program 33 (id=725):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xfe}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x7c}, 0x1, 0x0, 0x0, 0x80040}, 0x24000000)

8.494244881s ago: executing program 1 (id=3216):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0xd, 0x10, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffc0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x18e}}}, &(0x7f0000000000)='syzkaller\x00', 0x6, 0x102, &(0x7f00000008c0)=""/258}, 0x94)

8.493676589s ago: executing program 1 (id=3217):
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair(0x2, 0x1, 0x100, &(0x7f0000000440))
r0 = getpid()
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xfd, 0x2, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3}, r0, 0xa, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYRES32, @ANYRES32], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$kcm(0x11, 0x200000000000002, 0x300)
r3 = socket$kcm(0x10, 0x2, 0x10)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000013c0))
sendmsg$inet(r5, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0)
sendmsg$tipc(r5, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0)
sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407ffb, 0x20000000aea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x90000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0xffffffff, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x21}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(r5)
recvmsg(r4, 0x0, 0x0)
socket$kcm(0x2, 0x1, 0x84)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids.events\x00', 0x26e1, 0x0)
sendmsg$kcm(r3, 0x0, 0x0)
r6 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000100)=@caif=@rfm={0x25, 0x5, "cdfaaf7254f4ef6249f068fcdd7e1cbd"}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000300)="27050200340f14000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000102821880b000000000000002143ce554b6df654cb0173677c4e2eaa2eb5035d135958831197684b763f499a2fafc724413afe7af5b53e61532895bae8d3f0f02cc4e729883f078a2552275a1486218834476323059f91a91c500e035c5c70afee9d16b5acd7cd4b94e3600c9c", 0xac}, {&(0x7f0000000480)="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", 0x378}], 0x2}, 0x800)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffe7a)

8.270037506s ago: executing program 1 (id=3225):
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000007910be00000000007f0a0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a)

8.214561777s ago: executing program 1 (id=3226):
r0 = socket$kcm(0xa, 0x1, 0x106)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0)='./cgroup.cpu/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0)
socketpair(0x28, 0x1, 0x28, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x2, 0x2, 0x73)
socket$kcm(0x10, 0x2, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x800)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r4, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0}}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x94)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x800)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011)
sendmsg$kcm(r0, &(0x7f0000000b00)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0xe07e872420dfef8a)

7.604518374s ago: executing program 3 (id=3245):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x88}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

7.604356509s ago: executing program 3 (id=3246):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f3, &(0x7f0000000080))
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

7.513041621s ago: executing program 3 (id=3248):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2f, 0xffffff99, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd65e0ffff00122c00631177fbac14030a44079f03fe8000ff80000000000000000008ffff3a050b038da1880b251810a59d943be3f4aed50ea5a6b8686731cb89ef77523c899b699eeaa0eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000380)="b101000000353b", &(0x7f0000000000), 0x0, 0x700}, 0x2c)

7.374482526s ago: executing program 3 (id=3250):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0600000004000000990500000a"], 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x404, r0, 0x0, 0x1ba8847c99}, 0x38)

7.174623142s ago: executing program 3 (id=3253):
socket$kcm(0x2, 0x922000000001, 0x106)
r0 = perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x8000001946}, 0x0, 0x0, 0x0, 0x2, 0x3fe, 0x800}, 0x0, 0xffffffffffffffff, r0, 0xa)
r1 = socket$kcm(0xa, 0x2, 0x0)
close(r1)
socket$kcm(0x2, 0x3, 0x73)
setsockopt$sock_attach_bpf(r1, 0x0, 0x4, 0x0, 0x0)
sendmsg$inet(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x4e22, @dev}, 0x10, 0x0}, 0x400c080)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
r3 = socket$kcm(0x2c, 0x3, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000000206fff700000000000000000500000005000100060000000900020073797a31000000000500040000000000050005000200000016000300686173683a6e65742c706f72742c6e657400"], 0x50}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb0}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x94)

7.174408936s ago: executing program 1 (id=3254):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff8000000000000008000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

7.014546916s ago: executing program 3 (id=3255):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x102)
sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x4100, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3)
close(r0)

6.936197771s ago: executing program 34 (id=3255):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x102)
sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x4100, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3)
close(r0)

6.801224434s ago: executing program 1 (id=3257):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc)

6.798295115s ago: executing program 35 (id=3257):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc)

667.311589ms ago: executing program 4 (id=3279):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x100}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0)

654.285929ms ago: executing program 6 (id=3262):
r0 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000100)=[{&(0x7f0000001840)="b5", 0x1}], 0x4}, 0x0)

584.215266ms ago: executing program 6 (id=3281):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYRES64=r1], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf09000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0x7}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
close(0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06000000040000", @ANYBLOB, @ANYBLOB], 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="12000000030000000800000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r3}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r5, &(0x7f00000001c0), 0x0}, 0x20)
r6 = socket$kcm(0xf, 0x3, 0x2)
recvmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20)
perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x45, 0x0, 0xfd, 0x0, 0x20000009c, 0x10803, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0xffff, 0x5, 0x4, 0x2, 0x200000a, 0x48, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
r7 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r7, 0x29, 0x23, &(0x7f0000000040), 0xcf)
sendmsg$inet(r6, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0212000902000000e4a1", 0xa}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$ITER_CREATE(0xb, &(0x7f0000000040), 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r9 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r9, 0x0, 0xffffffffffffffff}, 0x20)
r10 = openat$cgroup_devices(r8, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r10, &(0x7f0000000200)=ANY=[@ANYBLOB='a 1'], 0xa)

584.02087ms ago: executing program 5 (id=3282):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x1002d4, 0x0, 0x0, 0x0, 0x0, 0x1f9e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="61124f00000000006113970000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150700000fff07003506000002000000170600000ee50000bf250000000000002d350000000000006507000002000000070700004c0001fa0f75000000000000bf54000000000000070400000400f9ff3d1401000000000095000000000000000500000000000000950007000000000001722fabb733a0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2211057300fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4)

502.845763ms ago: executing program 5 (id=3283):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000500)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc00090007000699030000000500160002008178a8001500070001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ec3350568b31937cbdce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d839da9ee307f27260e97030000000000000000000000003341000000", 0xd8}], 0x1}, 0x0)

501.162781ms ago: executing program 4 (id=3284):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b80), &(0x7f00000005c0), 0x80004, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc)

500.809544ms ago: executing program 5 (id=3285):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)="1400000010073507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x24000000)

438.897559ms ago: executing program 5 (id=3286):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014006040400060404009bbc7a46e3988285dcdf12f213e6f768fec601955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)

438.643222ms ago: executing program 4 (id=3287):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

438.558057ms ago: executing program 5 (id=3288):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r0}, 0xc)

382.860593ms ago: executing program 5 (id=3289):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, r0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e00000000c001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c8269956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bea01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f085f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c33c1ed1c0d9cae846bcbfa8cce7b8944578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e666e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000100000000000000000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf129e6d19079e64336e7c676505c78ad67548f4b192be18b1fed95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb080000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eaf36e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee40350273418d4b000000000000c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a7467941bc21edcb9cb8d81e24c3090e1cc90d99e76939da87908fe2bedb44211701130d07c860000ba43870c61fcb4e84dbb216e6046fd7965ec52c94c5bf7511f4ed930c2"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)

333.889µs ago: executing program 4 (id=3290):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x2}, [@alu={0x4, 0x1, 0x4, 0x760cda05bcf95fa0, 0x3, 0x1}]}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

108.071µs ago: executing program 4 (id=3291):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="10000000191411", @ANYRES32=r0], 0x10}}, 0x40000)

0s ago: executing program 4 (id=3292):
syz_clone(0x81000000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)="184b0c96f1983a")
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="09a6000000000000f37538e486dd630080fc5c082c00db5bffffffffff00000006016c040000000000000000000000000000ac1414aa3320"], 0xfdef)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:35431' (ED25519) to the list of known hosts.
syzkaller login: [   48.456949][ T5772] cgroup: Unknown subsys name 'net'
[   48.541528][ T5772] cgroup: Unknown subsys name 'cpuset'
[   48.545286][ T5772] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.104370][ T5772] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   59.219173][ T5237] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   59.223261][ T5237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   59.226926][ T5237] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   59.231018][ T5237] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   59.234622][ T5237] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   59.291513][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   59.295272][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   59.298515][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   59.302612][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   59.306401][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   59.407419][ T5237] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   59.411011][ T5237] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   59.415037][ T5237] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   59.421421][ T5237] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   59.425693][ T5237] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   59.442149][ T5862] chnl_net:caif_netlink_parms(): no params data found
[   59.623852][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.626450][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.631962][ T5862] bridge_slave_0: entered allmulticast mode
[   59.635780][ T5862] bridge_slave_0: entered promiscuous mode
[   59.640969][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.643673][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.646414][ T5862] bridge_slave_1: entered allmulticast mode
[   59.650803][ T5862] bridge_slave_1: entered promiscuous mode
[   59.700983][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.709918][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.761828][ T5862] team0: Port device team_slave_0 added
[   59.765855][ T5862] team0: Port device team_slave_1 added
[   59.805443][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.808504][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.818975][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.828092][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.831421][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.840202][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.859743][ T5866] chnl_net:caif_netlink_parms(): no params data found
[   59.921479][ T5862] hsr_slave_0: entered promiscuous mode
[   59.923698][ T5862] hsr_slave_1: entered promiscuous mode
[   59.927389][ T5871] chnl_net:caif_netlink_parms(): no params data found
[   60.004787][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.007513][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.011181][ T5866] bridge_slave_0: entered allmulticast mode
[   60.014312][ T5866] bridge_slave_0: entered promiscuous mode
[   60.034407][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.037009][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.040297][ T5866] bridge_slave_1: entered allmulticast mode
[   60.043554][ T5866] bridge_slave_1: entered promiscuous mode
[   60.077052][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.080317][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.082574][ T5871] bridge_slave_0: entered allmulticast mode
[   60.085155][ T5871] bridge_slave_0: entered promiscuous mode
[   60.093439][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.096984][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.099664][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.101963][ T5871] bridge_slave_1: entered allmulticast mode
[   60.105239][ T5871] bridge_slave_1: entered promiscuous mode
[   60.116207][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.179832][ T5866] team0: Port device team_slave_0 added
[   60.183350][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.192956][ T5866] team0: Port device team_slave_1 added
[   60.203698][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.252660][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.254995][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.264248][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.272400][ T5871] team0: Port device team_slave_0 added
[   60.275433][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.277938][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.287140][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.297278][ T5871] team0: Port device team_slave_1 added
[   60.330950][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.333408][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.342905][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.357252][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.359818][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.368018][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.389273][ T5866] hsr_slave_0: entered promiscuous mode
[   60.391766][ T5866] hsr_slave_1: entered promiscuous mode
[   60.394016][ T5866] debugfs: 'hsr0' already exists in 'hsr'
[   60.395998][ T5866] Cannot create hsr debugfs directory
[   60.486502][ T5862] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   60.497048][ T5871] hsr_slave_0: entered promiscuous mode
[   60.500275][ T5871] hsr_slave_1: entered promiscuous mode
[   60.502386][ T5871] debugfs: 'hsr0' already exists in 'hsr'
[   60.504300][ T5871] Cannot create hsr debugfs directory
[   60.516616][ T5862] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   60.553205][ T5862] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   60.558250][ T5862] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   60.671541][ T5866] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   60.677775][ T5866] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   60.700145][ T5866] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   60.711607][ T5866] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   60.777690][ T5871] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   60.784796][ T5871] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   60.792516][ T5871] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   60.803918][ T5871] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   60.849727][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.879195][ T5862] 8021q: adding VLAN 0 to HW filter on device team0
[   60.896553][ T3592] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.899298][ T3592] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.910795][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.914841][ T3592] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.917327][ T3592] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.965002][ T5866] 8021q: adding VLAN 0 to HW filter on device team0
[   60.975890][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.978145][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.001897][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.004404][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.009480][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.032840][ T5871] 8021q: adding VLAN 0 to HW filter on device team0
[   61.062612][ T3592] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.065608][ T3592] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.100460][ T3592] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.103488][ T3592] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.214381][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.271947][ T5862] veth0_vlan: entered promiscuous mode
[   61.281654][ T5862] veth1_vlan: entered promiscuous mode
[   61.289705][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.309888][ T5237] Bluetooth: hci0: command tx timeout
[   61.355292][ T5862] veth0_macvtap: entered promiscuous mode
[   61.361986][ T5866] veth0_vlan: entered promiscuous mode
[   61.368042][ T5862] veth1_macvtap: entered promiscuous mode
[   61.376654][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.381222][ T5866] veth1_vlan: entered promiscuous mode
[   61.389424][ T5237] Bluetooth: hci1: command tx timeout
[   61.408895][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.415664][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.435168][ T5882] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.440785][ T5866] veth0_macvtap: entered promiscuous mode
[   61.447063][ T5882] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.450960][ T5882] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.455578][ T5866] veth1_macvtap: entered promiscuous mode
[   61.460403][ T5882] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.469031][ T5237] Bluetooth: hci2: command tx timeout
[   61.478684][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.495064][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.504725][ T5882] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.523827][ T5882] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.526975][ T5882] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.532534][ T5871] veth0_vlan: entered promiscuous mode
[   61.555899][ T5882] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.591190][ T5871] veth1_vlan: entered promiscuous mode
[   61.620273][ T3998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.623258][ T3998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.650396][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.654218][ T3998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.657292][ T3998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.661516][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.702518][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.702577][ T5871] veth0_macvtap: entered promiscuous mode
[   61.712276][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.726281][ T5862] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   61.733798][ T5871] veth1_macvtap: entered promiscuous mode
[   61.771776][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.787017][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.823887][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.830171][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.844245][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.859733][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.935986][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.948476][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.971676][ T5928] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   62.021373][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.024909][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.144174][ T5940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8'.
[   62.288756][    C0] hrtimer: interrupt took 35403 ns
[   63.224978][ T5997] netlink: 'syz.2.40': attribute type 4 has an invalid length.
[   63.301455][ T6003] netlink: 16211 bytes leftover after parsing attributes in process `syz.2.43'.
[   63.420414][ T5237] Bluetooth: hci0: command tx timeout
[   63.469247][ T5237] Bluetooth: hci1: command tx timeout
[   63.482605][ T6009] netlink: 60 bytes leftover after parsing attributes in process `syz.0.42'.
[   63.588325][ T5237] Bluetooth: hci2: command tx timeout
[   64.110840][ T6032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.55'.
[   64.124600][ T6032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.55'.
[   64.199845][ T6034] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.57'.
[   64.203340][ T6034] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   64.206232][ T6034] openvswitch: netlink: Message has 6332 unknown bytes.
[   64.609736][ T6055] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.66'.
[   64.656959][ T6053] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode
[   64.659638][ T6053] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode
[   64.667971][ T6058] netlink: 4 bytes leftover after parsing attributes in process `syz.2.67'.
[   64.884007][ T6060] Zero length message leads to an empty skb
[   64.903079][ T6060] : renamed from wg2 (while UP)
[   65.482725][ T5237] Bluetooth: hci0: command tx timeout
[   65.549700][ T5237] Bluetooth: hci1: command tx timeout
[   65.690515][ T5237] Bluetooth: hci2: command tx timeout
[   66.271975][ T6089] netlink: 180 bytes leftover after parsing attributes in process `syz.1.80'.
[   66.467630][ T6107] syz.2.89 uses obsolete (PF_INET,SOCK_PACKET)
[   66.660578][ T6117] netlink: 'syz.0.93': attribute type 3 has an invalid length.
[   66.673440][ T6117] netlink: 201336 bytes leftover after parsing attributes in process `syz.0.93'.
[   67.416833][ T6138] wg0 speed is unknown, defaulting to 1000
[   67.420296][ T6138] wg0 speed is unknown, defaulting to 1000
[   67.423917][ T6138] wg0 speed is unknown, defaulting to 1000
[   67.432935][ T6138] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   67.440091][ T6138] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   67.456102][ T6138] wg0 speed is unknown, defaulting to 1000
[   67.460142][ T6138] wg0 speed is unknown, defaulting to 1000
[   67.463077][ T6138] wg0 speed is unknown, defaulting to 1000
[   67.549157][ T5237] Bluetooth: hci0: command tx timeout
[   67.637801][ T5237] Bluetooth: hci1: command tx timeout
[   67.762446][ T6157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.110'.
[   67.766320][ T6157] netlink: 16 bytes leftover after parsing attributes in process `syz.1.110'.
[   67.888709][ T5237] Bluetooth: hci2: command tx timeout
[   69.273200][ T6168] netlink: 'syz.2.115': attribute type 29 has an invalid length.
[   69.277281][ T6169] netlink: 'syz.2.115': attribute type 29 has an invalid length.
[   69.394410][ T6179] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.118'.
[   69.401487][ T6179] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.118'.
[   69.693836][ T6190] tap0: tun_chr_ioctl cmd 2148553947
[   70.303805][ T6198] netlink: 182 bytes leftover after parsing attributes in process `syz.0.128'.
[   70.341471][ T6201] netlink: 830 bytes leftover after parsing attributes in process `syz.1.129'.
[   70.498594][ T6215] netlink: 'syz.0.135': attribute type 3 has an invalid length.
[   70.502435][ T6215] netlink: 4264 bytes leftover after parsing attributes in process `syz.0.135'.
[   70.510678][ T6215] netlink: 'syz.0.135': attribute type 3 has an invalid length.
[   70.513995][ T6215] netlink: 4264 bytes leftover after parsing attributes in process `syz.0.135'.
[   70.542447][ T6219] warning: `syz.2.139' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   70.614721][ T6219] netlink: 26 bytes leftover after parsing attributes in process `syz.2.139'.
[   71.177436][ T6244] netlink: 56 bytes leftover after parsing attributes in process `syz.1.149'.
[   71.393741][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.398366][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.520356][ T6260] delete_channel: no stack
[   71.527088][ T6260] delete_channel: no stack
[   71.902040][ T6281] netlink: 'syz.1.161': attribute type 27 has an invalid length.
[   71.904920][ T6281] netlink: 'syz.1.161': attribute type 3 has an invalid length.
[   71.933777][ T6283] netlink: 'syz.1.162': attribute type 21 has an invalid length.
[   72.296014][ T6303] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   73.099640][ T6330] Driver unsupported XDP return value 0 on prog  (id 64) dev N/A, expect packet loss!
[   73.208700][ T6341] __nla_validate_parse: 3 callbacks suppressed
[   73.208709][ T6341] netlink: 20 bytes leftover after parsing attributes in process `syz.2.188'.
[   73.220832][ T6341] netlink: 'syz.2.188': attribute type 10 has an invalid length.
[   73.223919][ T6341] netlink: 2 bytes leftover after parsing attributes in process `syz.2.188'.
[   73.228570][ T6341] bond0: entered promiscuous mode
[   73.231903][ T6341] bond_slave_0: entered promiscuous mode
[   73.234246][ T6341] bond_slave_1: entered promiscuous mode
[   73.236623][ T6341] bridge0: port 3(bond0) entered blocking state
[   73.241095][ T6341] bridge0: port 3(bond0) entered disabled state
[   73.243776][ T6341] bond0: entered allmulticast mode
[   73.245842][ T6341] bond_slave_0: entered allmulticast mode
[   73.248176][ T6341] bond_slave_1: entered allmulticast mode
[   73.261540][ T6341] bridge0: port 3(bond0) entered blocking state
[   73.263722][ T6341] bridge0: port 3(bond0) entered forwarding state
[   73.270981][ T6341] netlink: 'syz.2.188': attribute type 4 has an invalid length.
[   73.274747][ T6341] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.188'.
[   73.544102][ T6362] netlink: 84 bytes leftover after parsing attributes in process `syz.0.199'.
[   73.639508][ T6370] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.203'.
[   73.798855][ T6382] netlink: 12 bytes leftover after parsing attributes in process `syz.2.209'.
[   74.244647][ T6408] netlink: 'syz.0.221': attribute type 13 has an invalid length.
[   74.499885][ T6408] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   74.570661][ T6425] netlink: 24 bytes leftover after parsing attributes in process `syz.2.229'.
[   74.573643][ T6425] netlink: 24 bytes leftover after parsing attributes in process `syz.2.229'.
[   74.650397][ T6431] netlink: 48 bytes leftover after parsing attributes in process `syz.2.232'.
[   74.672374][ T6408] syz.0.221 (6408) used greatest stack depth: 19728 bytes left
[   75.737779][ T6456] validate_nla: 1 callbacks suppressed
[   75.737791][ T6456] netlink: 'syz.0.244': attribute type 4 has an invalid length.
[   75.744790][ T6456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.244'.
[   75.868317][ T6464] batadv_slave_1: entered promiscuous mode
[   77.047651][ T6514] bond_slave_0: entered promiscuous mode
[   77.049958][ T6514] bond_slave_1: entered promiscuous mode
[   77.634588][ T6556] netlink: 'syz.1.289': attribute type 6 has an invalid length.
[   77.637916][ T6556] netlink: 'syz.1.289': attribute type 1 has an invalid length.
[   77.646172][ T6554] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   77.736490][ T6564] netlink: 'syz.2.293': attribute type 33 has an invalid length.
[   77.770765][ T6570] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   78.629869][ T6584] netlink: 'syz.0.302': attribute type 10 has an invalid length.
[   78.632862][ T6584] __nla_validate_parse: 10 callbacks suppressed
[   78.632871][ T6584] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.302'.
[   78.638250][ T6586] netlink: 196 bytes leftover after parsing attributes in process `syz.2.303'.
[   79.081820][ T6611] netlink: 60 bytes leftover after parsing attributes in process `syz.2.314'.
[   79.085079][ T6611] unsupported nlmsg_type 40
[   79.684813][ T6613] netlink: 'syz.0.315': attribute type 58 has an invalid length.
[   79.687889][ T6613] netlink: 144 bytes leftover after parsing attributes in process `syz.0.315'.
[   80.142843][ T6636] macvtap0: refused to change device tx_queue_len
[   80.151612][ T6643] netlink: 68 bytes leftover after parsing attributes in process `syz.2.329'.
[   80.154834][ T6643] netlink: 68 bytes leftover after parsing attributes in process `syz.2.329'.
[   81.632672][   T46] cfg80211: failed to load regulatory.db
[   82.064639][ T6680] netlink: 'syz.2.345': attribute type 1 has an invalid length.
[   82.980702][ T6704] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.356'.
[   83.082487][ T6713] bridge0: port 4(veth0_vlan) entered blocking state
[   83.084860][ T6716] netlink: 132 bytes leftover after parsing attributes in process `syz.0.361'.
[   83.085319][ T6713] bridge0: port 4(veth0_vlan) entered disabled state
[   83.092620][ T6713] veth0_vlan: entered allmulticast mode
[   83.093068][ T6717] netlink: 4172 bytes leftover after parsing attributes in process `syz.1.362'.
[   83.095498][ T6713] veth0_vlan: left allmulticast mode
[   83.880270][ T6755] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   83.884321][ T6755] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   84.953287][ T6794] sit0: entered promiscuous mode
[   85.285821][ T6800] syzkaller0: create flow: hash 139358553 index 1
[   85.318606][ T6800] syzkaller0: delete flow: hash 139358553 index 1
[   85.941499][ T6812] netlink: 'syz.0.401': attribute type 2 has an invalid length.
[   85.946987][ T6812] netlink: 85376 bytes leftover after parsing attributes in process `syz.0.401'.
[   86.678265][ T6834] netlink: 156 bytes leftover after parsing attributes in process `syz.2.411'.
[   86.876674][ T6850] netlink: 'syz.2.417': attribute type 10 has an invalid length.
[   86.901810][ T6850] veth0_vlan: left promiscuous mode
[   86.905407][ T6850] veth0_vlan: entered promiscuous mode
[   86.920882][ T6850] team0: Device veth0_vlan failed to register rx_handler
[   86.997209][ T6850] syz.2.417 (6850) used greatest stack depth: 19056 bytes left
[   87.208042][ T6861] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.421'.
[   87.273677][ T5237] Bluetooth: hci1: unexpected event 0x0f length: 15 > 4
[   91.494142][ T6915] netlink: 48 bytes leftover after parsing attributes in process `syz.2.443'.
[   92.824331][ T6959] netlink: 22 bytes leftover after parsing attributes in process `syz.0.461'.
[   93.016382][ T6973] netlink: 830 bytes leftover after parsing attributes in process `syz.2.468'.
[   93.123950][    C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   93.125042][ T6980] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.471'.
[   93.253479][ T6982] netlink: 60 bytes leftover after parsing attributes in process `syz.0.472'.
[   93.652456][ T6999] netlink: 'syz.0.479': attribute type 2 has an invalid length.
[   93.655589][ T6999] netlink: 137592 bytes leftover after parsing attributes in process `syz.0.479'.
[   93.867211][ T7010] netlink: 'syz.1.481': attribute type 21 has an invalid length.
[   93.943653][ T7010] netlink: 160 bytes leftover after parsing attributes in process `syz.1.481'.
[   95.534518][ T7126] netlink: 'syz.2.501': attribute type 1 has an invalid length.
[   95.537420][ T7126] netlink: 'syz.2.501': attribute type 4 has an invalid length.
[   95.549650][ T7126] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.501'.
[   95.755774][ T7142] netlink: 830 bytes leftover after parsing attributes in process `syz.2.509'.
[   95.951848][ T7160] syz.1.518: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   95.957569][ T7160] CPU: 0 UID: 0 PID: 7160 Comm: syz.1.518 Not tainted 6.17.0-rc1-syzkaller-00022-g07866544e410-dirty #0 PREEMPT(full) 
[   95.957584][ T7160] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   95.957590][ T7160] Call Trace:
[   95.957597][ T7160]  <TASK>
[   95.957604][ T7160]  dump_stack_lvl+0x189/0x250
[   95.957634][ T7160]  ? __pfx_dump_stack_lvl+0x10/0x10
[   95.957653][ T7160]  ? __pfx__printk+0x10/0x10
[   95.957675][ T7160]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   95.957692][ T7160]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   95.957715][ T7160]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   95.957740][ T7160]  warn_alloc+0x214/0x310
[   95.957765][ T7160]  ? stack_depot_save_flags+0x40/0x860
[   95.957789][ T7160]  ? __pfx_warn_alloc+0x10/0x10
[   95.957816][ T7160]  ? kasan_save_track+0x4f/0x80
[   95.957835][ T7160]  ? xskq_create+0x56/0x170
[   95.957847][ T7160]  ? xsk_init_queue+0xb0/0x110
[   95.957858][ T7160]  ? xsk_setsockopt+0x57b/0x8d0
[   95.957868][ T7160]  ? do_sock_setsockopt+0x17c/0x1b0
[   95.957884][ T7160]  ? __x64_sys_setsockopt+0x13f/0x1b0
[   95.957893][ T7160]  ? do_syscall_64+0xfa/0x3b0
[   95.957906][ T7160]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.957940][ T7160]  __vmalloc_node_range_noprof+0x125/0x12f0
[   95.958044][ T7160]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   95.958068][ T7160]  ? __kmalloc_cache_noprof+0x88/0x3d0
[   95.958094][ T7160]  ? __kasan_kmalloc+0x93/0xb0
[   95.958122][ T7160]  vmalloc_user_noprof+0xad/0xf0
[   95.958141][ T7160]  ? xskq_create+0xbf/0x170
[   95.958161][ T7160]  xskq_create+0xbf/0x170
[   95.958187][ T7160]  xsk_init_queue+0xb0/0x110
[   95.958212][ T7160]  xsk_setsockopt+0x57b/0x8d0
[   95.958237][ T7160]  ? __pfx_xsk_setsockopt+0x10/0x10
[   95.958255][ T7160]  ? __pfx_aa_sk_perm+0x10/0x10
[   95.958285][ T7160]  ? __fget_files+0x2a/0x420
[   95.958293][ T7160]  ? aa_sock_opt_perm+0xff/0x1b0
[   95.958317][ T7160]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   95.958328][ T7160]  ? __pfx_xsk_setsockopt+0x10/0x10
[   95.958350][ T7160]  do_sock_setsockopt+0x17c/0x1b0
[   95.958383][ T7160]  __x64_sys_setsockopt+0x13f/0x1b0
[   95.958413][ T7160]  do_syscall_64+0xfa/0x3b0
[   95.958427][ T7160]  ? lockdep_hardirqs_on+0x9c/0x150
[   95.958443][ T7160]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.958455][ T7160]  ? exc_page_fault+0x9f/0xf0
[   95.958507][ T7160]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.958521][ T7160] RIP: 0033:0x7fcf94d8ebe9
[   95.958536][ T7160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   95.958545][ T7160] RSP: 002b:00007fcf95bcd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   95.958557][ T7160] RAX: ffffffffffffffda RBX: 00007fcf94fb5fa0 RCX: 00007fcf94d8ebe9
[   95.958565][ T7160] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006
[   95.958572][ T7160] RBP: 00007fcf94e11e19 R08: 0000000000000004 R09: 0000000000000000
[   95.958579][ T7160] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[   95.958585][ T7160] R13: 00007fcf94fb6038 R14: 00007fcf94fb5fa0 R15: 00007ffec289e0f8
[   95.958661][ T7160]  </TASK>
[   96.135006][ T7160] Mem-Info:
[   96.136292][ T7160] active_anon:5131 inactive_anon:0 isolated_anon:0
[   96.136292][ T7160]  active_file:10979 inactive_file:38225 isolated_file:0
[   96.136292][ T7160]  unevictable:1768 dirty:326 writeback:0
[   96.136292][ T7160]  slab_reclaimable:9404 slab_unreclaimable:65514
[   96.136292][ T7160]  mapped:18068 shmem:2434 pagetables:955
[   96.136292][ T7160]  sec_pagetables:0 bounce:0
[   96.136292][ T7160]  kernel_misc_reclaimable:0
[   96.136292][ T7160]  free:280876 free_pcp:17754 free_cma:0
[   96.176468][ T7160] Node 0 active_anon:13596kB inactive_anon:0kB active_file:30852kB inactive_file:8160kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:30084kB dirty:740kB writeback:0kB shmem:4892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7236kB pagetables:2056kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   96.188333][ T7160] Node 1 active_anon:6860kB inactive_anon:0kB active_file:13064kB inactive_file:144740kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:42188kB dirty:564kB writeback:0kB shmem:4844kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4368kB pagetables:1832kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   96.213188][ T7160] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   96.237022][ T7160] lowmem_reserve[]: 0 811 811 811 811
[   96.243810][ T7160] Node 0 DMA32 free:401028kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13732kB inactive_anon:0kB active_file:30852kB inactive_file:8160kB unevictable:3536kB writepending:740kB present:1556484kB managed:830960kB mlocked:0kB bounce:0kB free_pcp:38924kB local_pcp:21924kB free_cma:0kB
[   96.258510][ T7160] lowmem_reserve[]: 0 0 0 0 0
[   96.260453][ T7160] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[   96.271746][ T7160] lowmem_reserve[]: 0 0 854 854 854
[   96.273804][ T7160] Node 1 Normal free:248624kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:6928kB inactive_anon:0kB active_file:13064kB inactive_file:144740kB unevictable:3536kB writepending:564kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:32060kB local_pcp:19792kB free_cma:0kB
[   96.286011][ T7160] lowmem_reserve[]: 0 0 0 0 0
[   96.287862][ T7160] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   96.293855][ T7160] Node 0 DMA32: 903*4kB (UME) 717*8kB (UME) 362*16kB (UME) 151*32kB (UME) 248*64kB (UME) 145*128kB (UM) 38*256kB (UME) 32*512kB (UM) 23*1024kB (UM) 7*2048kB (UME) 69*4096kB (UM) = 401028kB
[   96.301288][ T7160] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[   96.307520][ T7160] Node 1 Normal: 1202*4kB (UM) 679*8kB (UME) 549*16kB (UME) 216*32kB (UME) 103*64kB (UME) 26*128kB (UM) 15*256kB (UME) 10*512kB (M) 5*1024kB (UME) 5*2048kB (UM) 46*4096kB (M) = 248592kB
[   96.316951][ T7160] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   96.355598][ T7160] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   96.370127][ T7160] 51638 total pagecache pages
[   96.372378][ T7160] 0 pages in swap cache
[   96.374181][ T7160] Free swap  = 124996kB
[   96.376001][ T7160] Total swap = 124996kB
[   96.377758][ T7160] 786301 pages RAM
[   96.379695][ T7160] 0 pages HighMem/MovableOnly
[   96.381693][ T7160] 241329 pages reserved
[   96.383544][ T7160] 0 pages cma reserved
[   96.566733][ T7177] netlink: 'syz.1.525': attribute type 10 has an invalid length.
[   96.570241][ T7177] netlink: 168 bytes leftover after parsing attributes in process `syz.1.525'.
[   99.733843][ T5237] Bluetooth: hci0: unexpected subevent 0x12 length: 150 > 5
[  101.010112][ T7257] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.555'.
[  101.492836][ T7299] netlink: 'syz.2.573': attribute type 1 has an invalid length.
[  101.642803][ T7313] netlink: 'syz.1.581': attribute type 29 has an invalid length.
[  101.647720][ T7313] netlink: 'syz.1.581': attribute type 29 has an invalid length.
[  101.829015][ T7325] netlink: 'syz.2.584': attribute type 10 has an invalid length.
[  101.906643][ T7325] team0 (unregistering): Port device team_slave_0 removed
[  101.915764][ T7325] team0 (unregistering): Port device team_slave_1 removed
[  102.122158][ T7341] netlink: 56 bytes leftover after parsing attributes in process `syz.1.593'.
[  102.144865][ T7345] netlink: 'syz.0.595': attribute type 13 has an invalid length.
[  102.147579][ T7345] netlink: 14581 bytes leftover after parsing attributes in process `syz.0.595'.
[  102.257448][ T7356] netlink: 32 bytes leftover after parsing attributes in process `syz.1.601'.
[  102.316581][ T7361] Dead loop on virtual device ip6_vti0, fix it urgently!
[  102.458059][ T7366] netlink: 132 bytes leftover after parsing attributes in process `syz.1.604'.
[  102.708161][ T7385] netlink: 24 bytes leftover after parsing attributes in process `syz.2.614'.
[  102.727180][ T7387] netlink: 40 bytes leftover after parsing attributes in process `syz.1.615'.
[  102.736042][ T7387] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.762171][ T7387] bridge_slave_0 (unregistering): left allmulticast mode
[  102.766110][ T7387] bridge_slave_0 (unregistering): left promiscuous mode
[  102.768700][ T7387] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.805450][ T7394] netlink: 'syz.2.618': attribute type 3 has an invalid length.
[  102.812152][ T7394] netlink: 'syz.2.618': attribute type 1 has an invalid length.
[  102.819104][ T7394] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.618'.
[  102.932714][ T7387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.615'.
[  103.695670][ T7421] netlink: 'syz.1.630': attribute type 29 has an invalid length.
[  103.703796][ T7421] netlink: 'syz.1.630': attribute type 29 has an invalid length.
[  103.714127][ T7421] netlink: 'syz.1.630': attribute type 29 has an invalid length.
[  103.955973][ T7412] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.461230][ T7438] netlink: 148 bytes leftover after parsing attributes in process `syz.1.636'.
[  104.465047][ T7438] netlink: 36 bytes leftover after parsing attributes in process `syz.1.636'.
[  106.425685][ T7475] C: renamed from team_slave_0 (while UP)
[  106.464219][ T7475] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  106.626315][ T7485] sit0: entered allmulticast mode
[  106.643517][ T7488] validate_nla: 3 callbacks suppressed
[  106.643526][ T7488] netlink: 'syz.1.655': attribute type 2 has an invalid length.
[  106.684826][ T7479] sit0: entered promiscuous mode
[  107.392797][ T7503] netlink: 'syz.1.661': attribute type 10 has an invalid length.
[  107.395450][ T7503] __nla_validate_parse: 3 callbacks suppressed
[  107.395457][ T7503] netlink: 55 bytes leftover after parsing attributes in process `syz.1.661'.
[  108.525848][ T5237] Bluetooth: hci0: ISO packet too small
[  108.733070][ T7542] netlink: 'syz.2.678': attribute type 10 has an invalid length.
[  110.351281][ T7619] netlink: 12 bytes leftover after parsing attributes in process `syz.0.711'.
[  110.897128][ T7641] netlink: 'syz.2.721': attribute type 2 has an invalid length.
[  110.900854][ T7641] netlink: 'syz.2.721': attribute type 8 has an invalid length.
[  110.904565][ T7641] netlink: 132 bytes leftover after parsing attributes in process `syz.2.721'.
[  111.212651][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.304455][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.365053][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.432165][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.548013][   T13] bond0: left allmulticast mode
[  111.551784][   T13] bond_slave_0: left allmulticast mode
[  111.554039][   T13] bond_slave_1: left allmulticast mode
[  111.556947][   T13] bridge0: port 3(bond0) entered disabled state
[  111.566525][   T13] bridge_slave_1: left allmulticast mode
[  111.570407][   T13] bridge_slave_1: left promiscuous mode
[  111.574164][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.582258][   T13] bridge_slave_0: left allmulticast mode
[  111.584570][   T13] bridge_slave_0: left promiscuous mode
[  111.587089][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.823588][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  111.827723][   T13] bond_slave_0: left promiscuous mode
[  111.833695][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  111.837807][   T13] bond_slave_1: left promiscuous mode
[  111.841479][   T13] bond0 (unregistering): Released all slaves
[  112.145764][   T13] hsr_slave_0: left promiscuous mode
[  112.148714][   T13] hsr_slave_1: left promiscuous mode
[  112.156333][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  112.160451][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  112.164303][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  112.166832][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  112.179736][   T13] veth1_macvtap: left promiscuous mode
[  112.181744][   T13] veth0_macvtap: left promiscuous mode
[  112.183714][   T13] veth1_vlan: left promiscuous mode
[  112.636947][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  112.651443][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  112.654436][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  112.660589][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  112.665837][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  112.673652][ T5864] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  112.682632][ T5864] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  112.686636][ T5864] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  112.694539][ T5864] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  112.699174][ T5864] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  113.127318][ T7668] wg0 speed is unknown, defaulting to 1000
[  113.146235][ T7670] wg0 speed is unknown, defaulting to 1000
[  113.444350][ T7668] chnl_net:caif_netlink_parms(): no params data found
[  113.483349][ T7670] chnl_net:caif_netlink_parms(): no params data found
[  113.619455][ T7670] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.621857][ T7670] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.624243][ T7670] bridge_slave_0: entered allmulticast mode
[  113.626914][ T7670] bridge_slave_0: entered promiscuous mode
[  113.666379][ T7670] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.679191][ T7670] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.682369][ T7670] bridge_slave_1: entered allmulticast mode
[  113.709414][ T7670] bridge_slave_1: entered promiscuous mode
[  113.783921][ T7668] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.786623][ T7668] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.798951][ T7668] bridge_slave_0: entered allmulticast mode
[  113.801895][ T7668] bridge_slave_0: entered promiscuous mode
[  113.809773][ T7670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  113.816135][ T7670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  113.833829][ T7668] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.847038][ T7668] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.858924][ T7668] bridge_slave_1: entered allmulticast mode
[  113.862399][ T7668] bridge_slave_1: entered promiscuous mode
[  113.934926][ T7670] team0: Port device team_slave_0 added
[  113.940991][ T7668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  113.945755][ T7670] team0: Port device team_slave_1 added
[  113.975321][ T7668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  114.033280][ T7670] batman_adv: batadv0: Adding interface: batadv_slave_0
[  114.036274][ T7670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  114.058912][ T7670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  114.064992][ T7668] team0: Port device team_slave_0 added
[  114.068081][ T7670] batman_adv: batadv0: Adding interface: batadv_slave_1
[  114.072342][ T7670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  114.093732][ T7670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  114.109738][ T7668] team0: Port device team_slave_1 added
[  114.143673][ T7668] batman_adv: batadv0: Adding interface: batadv_slave_0
[  114.145816][ T7668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  114.155896][ T7668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  114.160852][ T7668] batman_adv: batadv0: Adding interface: batadv_slave_1
[  114.163394][ T7668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  114.175594][ T7668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  114.264372][ T7670] hsr_slave_0: entered promiscuous mode
[  114.267705][ T7670] hsr_slave_1: entered promiscuous mode
[  114.280229][ T7670] debugfs: 'hsr0' already exists in 'hsr'
[  114.283273][ T7670] Cannot create hsr debugfs directory
[  114.453460][ T7668] hsr_slave_0: entered promiscuous mode
[  114.457174][ T7668] hsr_slave_1: entered promiscuous mode
[  114.462432][ T7668] debugfs: 'hsr0' already exists in 'hsr'
[  114.464917][ T7668] Cannot create hsr debugfs directory
[  114.749281][   T54] Bluetooth: hci0: command tx timeout
[  114.751790][ T5864] Bluetooth: hci1: command tx timeout
[  114.794736][ T7670] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  114.821581][ T7670] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  114.834704][ T7670] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  114.853578][ T7670] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  114.895593][ T7668] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  114.911298][ T7668] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  114.938038][ T7668] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  114.953363][ T7668] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  115.123493][ T7670] 8021q: adding VLAN 0 to HW filter on device bond0
[  115.146527][ T7670] 8021q: adding VLAN 0 to HW filter on device team0
[  115.178354][ T7668] 8021q: adding VLAN 0 to HW filter on device bond0
[  115.191227][ T3998] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.194391][ T3998] bridge0: port 1(bridge_slave_0) entered forwarding state
[  115.225578][ T3998] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.228799][ T3998] bridge0: port 2(bridge_slave_1) entered forwarding state
[  115.244332][ T7668] 8021q: adding VLAN 0 to HW filter on device team0
[  115.265779][ T3998] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.269080][ T3998] bridge0: port 1(bridge_slave_0) entered forwarding state
[  115.295646][ T3998] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.298851][ T3998] bridge0: port 2(bridge_slave_1) entered forwarding state
[  115.363969][ T7668] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  115.368457][ T7668] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  115.767862][ T7668] 8021q: adding VLAN 0 to HW filter on device batadv0
[  115.843317][ T7670] 8021q: adding VLAN 0 to HW filter on device batadv0
[  115.977735][ T7670] veth0_vlan: entered promiscuous mode
[  116.004628][ T7670] veth1_vlan: entered promiscuous mode
[  116.106158][ T7670] veth0_macvtap: entered promiscuous mode
[  116.128654][ T7670] veth1_macvtap: entered promiscuous mode
[  116.182036][ T7670] batman_adv: batadv0: Interface activated: batadv_slave_0
[  116.218590][ T7670] batman_adv: batadv0: Interface activated: batadv_slave_1
[  116.240162][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  116.251105][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  116.253900][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  116.261403][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  116.312656][ T7668] veth0_vlan: entered promiscuous mode
[  116.336348][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.336860][ T7668] veth1_vlan: entered promiscuous mode
[  116.342727][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.382209][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.389653][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.392240][ T7668] veth0_macvtap: entered promiscuous mode
[  116.396646][ T7668] veth1_macvtap: entered promiscuous mode
[  116.425921][ T7668] batman_adv: batadv0: Interface activated: batadv_slave_0
[  116.440405][ T7668] batman_adv: batadv0: Interface activated: batadv_slave_1
[  116.461211][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  116.464848][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  116.468586][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  116.518838][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  116.564499][ T7726] netlink: 'syz.1.733': attribute type 29 has an invalid length.
[  116.571030][ T7726] netlink: 'syz.1.733': attribute type 29 has an invalid length.
[  116.629159][ T3998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.632567][ T3998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.674754][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.678614][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.700559][ T7732] netlink: 36 bytes leftover after parsing attributes in process `syz.1.736'.
[  116.704420][ T7732] D`: renamed from hsr_slave_1 (while UP)
[  116.829145][ T5864] Bluetooth: hci1: command tx timeout
[  116.829649][   T54] Bluetooth: hci0: command tx timeout
[  118.227397][ T7789] syzkaller0: refused to change device tx_queue_len
[  118.605653][ T7802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.768'.
[  118.611715][ T7802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.768'.
[  118.910221][ T5864] Bluetooth: hci1: command tx timeout
[  118.912228][   T54] Bluetooth: hci0: command tx timeout
[  119.165814][ T7824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.777'.
[  119.173617][ T7824] netlink: 44 bytes leftover after parsing attributes in process `syz.4.777'.
[  119.247341][ T7827] netlink: 4 bytes leftover after parsing attributes in process `syz.4.780'.
[  119.254882][ T7830] openvswitch: netlink: Tunnel attr 72 out of range max 16
[  119.405739][ T7837] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.783'.
[  119.451234][ T7839] netlink: 4 bytes leftover after parsing attributes in process `syz.1.784'.
[  119.578208][ T7841] netlink: 'syz.1.785': attribute type 3 has an invalid length.
[  119.582478][ T7841] netlink: 'syz.1.785': attribute type 2 has an invalid length.
[  119.585109][ T7841] netlink: 198112 bytes leftover after parsing attributes in process `syz.1.785'.
[  120.990148][   T54] Bluetooth: hci0: command tx timeout
[  120.994830][   T54] Bluetooth: hci1: command tx timeout
[  122.394526][ T7912] netlink: 'syz.4.815': attribute type 10 has an invalid length.
[  123.255453][ T7912] syz.4.815 (7912) used greatest stack depth: 18664 bytes left
[  123.410373][ T7934] netlink: 'syz.3.825': attribute type 21 has an invalid length.
[  123.417271][ T7937] netlink: 'syz.1.826': attribute type 29 has an invalid length.
[  123.420535][ T7937] netlink: 'syz.1.826': attribute type 29 has an invalid length.
[  123.423932][ T7937] netlink: 'syz.1.826': attribute type 29 has an invalid length.
[  123.427353][ T7937] netlink: 'syz.1.826': attribute type 29 has an invalid length.
[  123.466244][ T7940] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.828'.
[  123.474259][ T7941] netlink: 4 bytes leftover after parsing attributes in process `syz.4.827'.
[  123.478346][ T7941] netlink: 4 bytes leftover after parsing attributes in process `syz.4.827'.
[  123.877657][ T7965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.840'.
[  124.676200][ T8022] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  125.587103][ T8041] veth1_macvtap: left promiscuous mode
[  125.904429][ T8052] netlink: 'syz.4.878': attribute type 28 has an invalid length.
[  126.029941][ T8068] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.885'.
[  126.033797][ T8068] netlink: zone id is out of range
[  126.037242][ T8068] netlink: zone id is out of range
[  126.047134][ T8068] netlink: zone id is out of range
[  126.049880][ T8068] netlink: get zone limit has 8 unknown bytes
[  126.086336][ T8070] netlink: 'syz.1.886': attribute type 10 has an invalid length.
[  126.344580][ T8096] netlink: 40 bytes leftover after parsing attributes in process `syz.1.899'.
[  126.358305][ T8098] netlink: 16 bytes leftover after parsing attributes in process `syz.3.900'.
[  126.630917][ T8120] netlink: 60 bytes leftover after parsing attributes in process `syz.3.911'.
[  126.646358][ T8121] netlink: 'syz.1.910': attribute type 19 has an invalid length.
[  126.651664][ T8121] netlink: 40 bytes leftover after parsing attributes in process `syz.1.910'.
[  126.702028][ T8123] netlink: 'syz.1.912': attribute type 10 has an invalid length.
[  126.706523][ T8123] geneve0: entered promiscuous mode
[  126.722366][ T8123] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  127.026491][ T8134] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.917'.
[  128.523975][ T8178] __nla_validate_parse: 4 callbacks suppressed
[  128.524046][ T8178] netlink: 24032 bytes leftover after parsing attributes in process `syz.4.935'.
[  128.532890][ T8178] netlink: 104088 bytes leftover after parsing attributes in process `syz.4.935'.
[  128.538266][ T8178] netlink: 24032 bytes leftover after parsing attributes in process `syz.4.935'.
[  128.700858][ T8193] netlink: 10 bytes leftover after parsing attributes in process `syz.4.942'.
[  129.043244][ T8213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.952'.
[  129.187450][ T8227] netlink: 'syz.4.959': attribute type 21 has an invalid length.
[  129.190433][ T8227] netlink: 132 bytes leftover after parsing attributes in process `syz.4.959'.
[  129.248546][ T8231] netlink: 'syz.4.960': attribute type 2 has an invalid length.
[  129.426868][ T8244] netlink: 164 bytes leftover after parsing attributes in process `syz.4.967'.
[  129.473575][ T8249] netlink: 208344 bytes leftover after parsing attributes in process `syz.4.969'.
[  129.476844][ T8249] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  129.481286][ T8249] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  129.542299][ T8256] netlink: 272 bytes leftover after parsing attributes in process `syz.4.973'.
[  129.552197][ T8258] netlink: 'syz.3.974': attribute type 29 has an invalid length.
[  129.560684][ T8258] netlink: 'syz.3.974': attribute type 29 has an invalid length.
[  129.572283][ T8258] netlink: 'syz.3.974': attribute type 29 has an invalid length.
[  129.576230][ T8258] netlink: 'syz.3.974': attribute type 29 has an invalid length.
[  129.722391][ T8276] netlink: 132 bytes leftover after parsing attributes in process `syz.1.983'.
[  131.481208][ T8300] netlink: 'syz.1.993': attribute type 3 has an invalid length.
[  131.680045][ T8306] netlink: 'syz.1.995': attribute type 3 has an invalid length.
[  132.629659][ T8335] netlink: 'syz.4.1008': attribute type 10 has an invalid length.
[  132.638044][ T8335] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  132.837308][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.840532][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  133.136466][ T8351] C: renamed from team_slave_0 (while UP)
[  133.145604][ T8351] netlink: 'syz.4.1014': attribute type 3 has an invalid length.
[  133.156024][ T8351] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  133.182474][ T8346] wg0 speed is unknown, defaulting to 1000
[  134.080989][ T8378] raw_sendmsg: syz.3.1025 forgot to set AF_INET. Fix it!
[  134.206215][ T8382] __nla_validate_parse: 4 callbacks suppressed
[  134.206229][ T8382] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1027'.
[  134.713200][ T8410] veth0_vlan: entered allmulticast mode
[  134.728437][ T8410] : renamed from vlan0
[  134.851712][ T8420] netlink: 'syz.3.1044': attribute type 3 has an invalid length.
[  134.855444][ T8420] netlink: 'syz.3.1044': attribute type 2 has an invalid length.
[  134.859148][ T8420] netlink: 198112 bytes leftover after parsing attributes in process `syz.3.1044'.
[  134.904502][ T8429] netlink: 'syz.3.1048': attribute type 10 has an invalid length.
[  134.915190][ T8429] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  134.994926][ T8433] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1050'.
[  135.231721][ T8447] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1057'.
[  135.237421][ T8447] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1057'.
[  136.212804][ T8459] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1063'.
[  136.216015][ T8464] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1065'.
[  136.220099][ T8464] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1065'.
[  136.224413][ T8464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1065'.
[  136.336886][ T8472] netlink: 'syz.3.1069': attribute type 1 has an invalid length.
[  136.339968][ T8472] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1069'.
[  137.639925][ T8492] netlink: 'syz.1.1077': attribute type 12 has an invalid length.
[  137.733301][ T8499] netlink: 'syz.1.1081': attribute type 29 has an invalid length.
[  138.090976][ T8516] wg0 speed is unknown, defaulting to 1000
[  138.453500][ T8530] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  138.491873][ T8532] netlink: 'syz.4.1095': attribute type 3 has an invalid length.
[  138.495369][ T8532] netlink: 'syz.4.1095': attribute type 2 has an invalid length.
[  139.045588][ T5864] Bluetooth: hci2: unexpected event 0x1d length: 15 > 5
[  139.164542][ T8582] netlink: 'syz.4.1117': attribute type 25 has an invalid length.
[  139.221324][ T5864] Bluetooth: hci2: adv larger than maximum supported
[  139.321543][ T8592] __nla_validate_parse: 9 callbacks suppressed
[  139.321552][ T8592] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1120'.
[  139.330902][ T8592] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1120'.
[  139.341688][ T8588] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1120'.
[  139.436797][ T8597] netlink: 'syz.3.1124': attribute type 10 has an invalid length.
[  139.474227][ T8597] team0: Port device geneve1 added
[  139.475432][ T8599] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1125'.
[  139.502467][ T8601] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1126'.
[  139.746840][ T8613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1131'.
[  139.751068][ T8613] openvswitch: netlink: nsh attr 0 has unexpected len 86 expected 0
[  139.754539][ T8613] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  139.862548][ T8619] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1135'.
[  139.925465][ T8623] tap0: tun_chr_ioctl cmd 2147767521
[  140.372293][ T8664] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.1156'.
[  140.597436][ T8686] validate_nla: 2 callbacks suppressed
[  140.597447][ T8686] netlink: 'syz.3.1166': attribute type 1 has an invalid length.
[  140.603816][ T8685] netlink: 'syz.4.1165': attribute type 3 has an invalid length.
[  140.606866][ T8685] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.1165'.
[  140.901407][ T8701] wg0 speed is unknown, defaulting to 1000
[  142.838278][ T8755] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1196'.
[  143.048967][ T8769] netlink: 'syz.3.1203': attribute type 41 has an invalid length.
[  143.974842][ T8773] netlink: 'syz.3.1206': attribute type 17 has an invalid length.
[  143.977705][ T8773] netlink: 'syz.3.1206': attribute type 16 has an invalid length.
[  144.068852][   T33] audit: type=1107 audit(1755512265.509:2): pid=8778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  144.108394][ T8777] bridge_slave_1: left allmulticast mode
[  144.122350][ T8777] bridge_slave_1: left promiscuous mode
[  144.127519][ T8777] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.892450][ T8794] __nla_validate_parse: 5 callbacks suppressed
[  144.892464][ T8794] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.1215'.
[  146.423299][ T8853] sctp: [Deprecated]: syz.4.1236 (pid 8853) Use of int in max_burst socket option deprecated.
[  146.423299][ T8853] Use struct sctp_assoc_value instead
[  146.705609][ T8876] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1245'.
[  146.748042][ T8878] openvswitch: netlink: Missing key (keys=c0, expected=200000)
[  146.843151][ T8884] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1249'.
[  147.006041][ T8896] netlink: 'syz.1.1255': attribute type 12 has an invalid length.
[  147.013008][ T8896] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1255'.
[  148.274134][ T8951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1279'.
[  148.341324][ T8949] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1278'.
[  148.988683][ T8970] netlink: 'syz.4.1288': attribute type 21 has an invalid length.
[  148.997752][ T8970] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1288'.
[  149.017116][ T8970] netlink: 'syz.4.1288': attribute type 1 has an invalid length.
[  149.111183][ T8970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1288'.
[  149.537450][ T8970] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1288'.
[  150.273875][ T8995] netlink: 'syz.3.1297': attribute type 21 has an invalid length.
[  150.597797][ T9006] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1302'.
[  150.932565][ T9019] syzkaller0: entered promiscuous mode
[  150.935034][ T9019] syzkaller0: entered allmulticast mode
[  151.179900][ T9031] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1313'.
[  152.957391][ T9081] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1335'.
[  153.405802][ T9101] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  153.408832][ T9101] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  153.414914][ T9093] netlink: 'syz.4.1340': attribute type 10 has an invalid length.
[  153.423617][ T9093] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  153.440219][ T9098] netlink: 'syz.1.1342': attribute type 10 has an invalid length.
[  153.626519][ T9115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1347'.
[  153.962385][ T9123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1351'.
[  153.978407][ T9123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1351'.
[  154.419133][ T9135] syzkaller0: entered promiscuous mode
[  154.421345][ T9135] syzkaller0: entered allmulticast mode
[  154.474960][ T9136] netlink: 'syz.4.1354': attribute type 10 has an invalid length.
[  154.653552][ T9136] 8021q: adding VLAN 0 to HW filter on device bond0
[  154.657712][ T9136] team0: Port device bond0 added
[  154.813131][ T9147] IPv6: NLM_F_CREATE should be specified when creating new route
[  156.743283][ T9172] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1372'.
[  156.754943][ T9165] wg0 speed is unknown, defaulting to 1000
[  156.907722][ T9181] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1375'.
[  156.987970][ T9183] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1376'.
[  157.004853][ T9183] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1376'.
[  157.068469][ T9187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1378'.
[  157.124676][ T9188] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1378'.
[  157.243895][ T9196] netlink: 198328 bytes leftover after parsing attributes in process `syz.1.1382'.
[  157.247802][ T9196] netlink: 'syz.1.1382': attribute type 1 has an invalid length.
[  157.254738][ T9196] netlink: 'syz.1.1382': attribute type 2 has an invalid length.
[  157.328644][ T9200] netlink: 'syz.3.1383': attribute type 10 has an invalid length.
[  157.383668][ T9200] 8021q: adding VLAN 0 to HW filter on device batadv0
[  157.405147][ T9200] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  157.411342][ T9201] bond0: entered promiscuous mode
[  157.413075][ T9201] bond_slave_0: entered promiscuous mode
[  157.415134][ T9201] bond_slave_1: entered promiscuous mode
[  157.417083][ T9201] dummy0: entered promiscuous mode
[  157.419582][ T9201] batadv0: entered promiscuous mode
[  157.432774][ T9195] netlink: 'syz.4.1381': attribute type 4 has an invalid length.
[  157.540437][ T9212] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1389'.
[  157.543737][ T9213] netlink: 628 bytes leftover after parsing attributes in process `syz.1.1388'.
[  157.546990][ T9212] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1389'.
[  157.853332][ T5864] Bluetooth: hci1: ACL packet for unknown connection handle 0
[  157.925221][ T9248] netlink: 'syz.4.1406': attribute type 2 has an invalid length.
[  158.056003][ T9258] netlink: 'syz.4.1410': attribute type 3 has an invalid length.
[  158.059543][ T9258] netlink: 'syz.4.1410': attribute type 4 has an invalid length.
[  158.257187][ T9272] delete_channel: no stack
[  158.714103][ T9306] validate_nla: 4 callbacks suppressed
[  158.714117][ T9306] netlink: 'syz.1.1431': attribute type 6 has an invalid length.
[  160.826737][   T33] audit: type=1107 audit(1755512282.269:3): pid=9356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  160.858331][ T9358] : renamed from bond0 (while UP)
[  160.990251][ T9363] netlink: 'syz.4.1457': attribute type 39 has an invalid length.
[  162.052501][ T9380] __nla_validate_parse: 7 callbacks suppressed
[  162.052517][ T9380] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.1464'.
[  162.397034][ T9382] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  162.545107][ T9390] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1468'.
[  162.661801][ T9400] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  162.664795][ T9400] IPv6: NLM_F_CREATE should be set when creating new route
[  162.667416][ T9400] IPv6: NLM_F_CREATE should be set when creating new route
[  162.669944][ T9400] IPv6: NLM_F_CREATE should be set when creating new route
[  162.741847][ T9406] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1476'.
[  162.811702][ T5864] Bluetooth: hci0: unexpected event 0x33 length: 15 > 10
[  162.894921][ T9416] netlink: 'syz.3.1481': attribute type 1 has an invalid length.
[  163.299075][ T9444] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.1493'.
[  163.305048][ T9444] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  163.308672][ T9444] openvswitch: netlink: Key 0 has unexpected len 3 expected 0
[  163.454946][ T9450] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.1495'.
[  163.458553][ T9449] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.1495'.
[  163.966083][ T5864] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10
[  163.966346][ T5864] Bluetooth: hci2: connection err: -111
[  163.966523][ T9494] @: renamed from bond_slave_0 (while UP)
[  164.056719][ T9498] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1512'.
[  164.387393][ T9520] netlink: 'syz.4.1522': attribute type 2 has an invalid length.
[  164.390985][ T9520] netlink: 17267 bytes leftover after parsing attributes in process `syz.4.1522'.
[  164.811848][ T9529] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1526'.
[  165.094958][ T9545] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1530'.
[  165.721191][ T9589] netlink: 'syz.4.1550': attribute type 15 has an invalid length.
[  165.724651][ T9589] netlink: 'syz.4.1550': attribute type 7 has an invalid length.
[  165.854170][ T5864] Bluetooth: hci0: unexpected event 0x3c length: 15 > 7
[  165.987742][ T9602] netlink: 'syz.1.1556': attribute type 21 has an invalid length.
[  167.154549][ T9699] __nla_validate_parse: 7 callbacks suppressed
[  167.154559][ T9699] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1602'.
[  167.202542][ T9702] netlink: 'syz.1.1601': attribute type 16 has an invalid length.
[  167.206066][ T9702] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1601'.
[  168.977943][ T9730] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.1611'.
[  169.957916][ T9749] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1619'.
[  170.095924][ T9749] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1619'.
[  170.460491][ T9749] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1619'.
[  170.673406][ T9756] netlink: 'syz.1.1620': attribute type 10 has an invalid length.
[  170.678968][ T9756] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  170.715492][ T9762] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1621'.
[  170.736813][ T9762] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.1621'.
[  170.926933][ T9772] netlink: 'syz.4.1626': attribute type 1 has an invalid length.
[  171.157158][ T9781] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1630'.
[  171.448554][ T9791] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  172.536808][ T9809] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1643'.
[  172.692443][ T5864] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3
[  173.050457][ T9841] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1658'.
[  173.054183][ T9841] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1658'.
[  173.154489][ T9851] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.1662'.
[  173.249269][ T9859] mac80211_hwsim hwsim7 .3#c: renamed from wlan1
[  173.372574][ T9871] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode
[  173.397356][ T9871] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode
[  173.486216][ T9888] netlink: 'syz.4.1678': attribute type 39 has an invalid length.
[  174.425454][ T9914] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1688'.
[  174.488383][ T9923] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1693'.
[  174.573944][ T9934] netlink: 'syz.4.1698': attribute type 13 has an invalid length.
[  174.642259][ T9942] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1702'.
[  174.646786][ T9942] batadv_slave_1: entered promiscuous mode
[  174.998264][ T9955] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1707'.
[  175.007349][ T9955] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1707'.
[  175.463057][ T9971] C: renamed from team_slave_0 (while UP)
[  175.476096][ T9971] netlink: 'syz.3.1714': attribute type 3 has an invalid length.
[  175.487771][ T9971] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1714'.
[  176.557748][ T9986] netlink: 'syz.3.1719': attribute type 2 has an invalid length.
[  176.739012][T10002] netlink: 'syz.1.1727': attribute type 10 has an invalid length.
[  176.743725][T10002] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  176.748460][T10002] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  177.573161][T10057] netlink: 'syz.4.1752': attribute type 25 has an invalid length.
[  177.576701][T10057] netlink: 'syz.4.1752': attribute type 1 has an invalid length.
[  177.583577][T10057] bridge0: port 1(bridge_slave_0) entered learning state
[  177.717230][T10065] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  177.816697][T10075] netlink: 'syz.3.1760': attribute type 6 has an invalid length.
[  177.823019][T10075] netlink: 'syz.3.1760': attribute type 3 has an invalid length.
[  177.826061][T10075] __nla_validate_parse: 2 callbacks suppressed
[  177.826069][T10075] netlink: 153952 bytes leftover after parsing attributes in process `syz.3.1760'.
[  178.189212][T10098] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1771'.
[  178.613730][T10123] netlink: 'syz.4.1782': attribute type 3 has an invalid length.
[  178.627852][T10123] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1782'.
[  178.649900][T10127] netlink: 'syz.1.1783': attribute type 39 has an invalid length.
[  178.655795][T10127] veth0_macvtap: left promiscuous mode
[  178.829129][ T5864] Bluetooth: hci0: command 0x0406 tx timeout
[  178.842722][T10149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1795'.
[  178.960657][T10163] netlink: 'syz.4.1798': attribute type 10 has an invalid length.
[  178.968006][T10163] geneve0: entered promiscuous mode
[  179.045104][T10163] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  179.120008][T10170] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.1804'.
[  179.255935][T10188] netlink: 'syz.3.1813': attribute type 21 has an invalid length.
[  179.259307][T10188] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1813'.
[  179.288476][T10190] syzkaller1: tun_chr_ioctl cmd 1074812118
[  179.776627][T10198] netlink: 191264 bytes leftover after parsing attributes in process `syz.1.1818'.
[  179.985011][T10218] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1826'.
[  179.987990][T10218] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1826'.
[  180.003438][T10218] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1826'.
[  180.076646][T10219] delete_channel: no stack
[  181.095446][T10251] : entered promiscuous mode
[  181.391670][T10274] netdevsim netdevsim3 : renamed from netdevsim0 (while UP)
[  181.441950][T10279] bpf: Bad value for 'gid'
[  182.684382][T10360] validate_nla: 3 callbacks suppressed
[  182.684396][T10360] netlink: 'syz.3.1893': attribute type 10 has an invalid length.
[  182.845673][T10374] __nla_validate_parse: 4 callbacks suppressed
[  182.845687][T10374] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1897'.
[  182.862538][T10374] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1897'.
[  182.874415][T10368] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1897'.
[  183.021686][T10374] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  183.154147][T10391] netlink: 'syz.4.1907': attribute type 11 has an invalid length.
[  183.200880][T10396] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1909'.
[  183.345547][T10412] netlink: 'syz.3.1918': attribute type 21 has an invalid length.
[  183.738474][T10438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1929'.
[  184.056280][T10454] netlink: 'syz.1.1938': attribute type 21 has an invalid length.
[  184.066847][T10454] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1938'.
[  184.078333][    T9] wg0 speed is unknown, defaulting to 1000
[  184.082202][    T9] syz0: Port: 1 Link DOWN
[  184.132603][ T5882] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.230158][ T5882] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.246801][T10460] =======================================================
[  184.246801][T10460] WARNING: The mand mount option has been deprecated and
[  184.246801][T10460]          and is ignored by this kernel. Remove the mand
[  184.246801][T10460]          option from the mount to silence this warning.
[  184.246801][T10460] =======================================================
[  184.326888][ T5882] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.476321][T10470] netlink: 'syz.3.1945': attribute type 1 has an invalid length.
[  184.513271][T10470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1945'.
[  185.005587][ T5882] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.151984][ T5882] bridge_slave_1: left allmulticast mode
[  185.154114][ T5882] bridge_slave_1: left promiscuous mode
[  185.156338][ T5882] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.590150][ T5882] bridge_slave_0: left allmulticast mode
[  185.592632][ T5882] bridge_slave_0: left promiscuous mode
[  185.595136][ T5882] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.009889][ T5882] bond_slave_0: left promiscuous mode
[  186.012202][ T5882] bond_slave_1: left promiscuous mode
[  186.119014][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  186.325032][ T5882] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  186.330827][ T5882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  186.335242][ T5882] bond0 (unregistering): Released all slaves
[  186.344510][T10474] netlink: 'syz.1.1947': attribute type 4 has an invalid length.
[  186.543578][T10507] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.1961'.
[  186.822332][ T5882] hsr_slave_0: left promiscuous mode
[  186.837877][ T5882] hsr_slave_1: left promiscuous mode
[  186.845727][ T5882] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  186.854035][ T5882] batman_adv: batadv0: Removing interface: batadv_slave_0
[  186.866659][ T5882] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  186.872839][T10527] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1968'.
[  186.874280][ T5882] batman_adv: batadv0: Removing interface: batadv_slave_1
[  186.900395][ T5882] veth1_macvtap: left promiscuous mode
[  186.902228][ T5882] veth0_macvtap: left promiscuous mode
[  186.904032][ T5882] veth1_vlan: left promiscuous mode
[  186.906255][ T5882] veth0_vlan: left promiscuous mode
[  186.961689][T10537] netlink: 'syz.4.1972': attribute type 3 has an invalid length.
[  186.965083][T10537] netlink: 'syz.4.1972': attribute type 4 has an invalid length.
[  186.968534][T10537] netlink: 9067 bytes leftover after parsing attributes in process `syz.4.1972'.
[  187.272515][ T5882] team0 (unregistering): Port device team_slave_1 removed
[  187.297283][ T5882] team0 (unregistering): Port device C removed
[  187.621603][T10542] bridge0: port 3(veth1_to_team) entered blocking state
[  187.628256][T10542] bridge0: port 3(veth1_to_team) entered disabled state
[  187.632960][T10542] veth1_to_team: entered allmulticast mode
[  187.636829][T10542] veth1_to_team: entered promiscuous mode
[  187.640594][T10542] bridge0: port 3(veth1_to_team) entered blocking state
[  187.643633][T10542] bridge0: port 3(veth1_to_team) entered forwarding state
[  187.863854][T10553] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1978'.
[  187.913120][T10557] netlink: 'syz.4.1980': attribute type 21 has an invalid length.
[  188.017064][T10567] netlink: 149044 bytes leftover after parsing attributes in process `syz.3.1984'.
[  188.050175][T10569] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1986'.
[  188.433741][T10596] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1998'.
[  188.437600][T10596] : left promiscuous mode
[  188.498059][T10583] syz.1.1993 (10583) used greatest stack depth: 18096 bytes left
[  188.802798][T10613] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2006'.
[  188.806810][T10613] netlink: zone id is out of range
[  188.810920][T10613] netlink: get zone limit has 8 unknown bytes
[  189.065466][T10631] netlink: 'syz.3.2014': attribute type 10 has an invalid length.
[  189.069491][T10631] macvlan0: entered promiscuous mode
[  189.071409][T10631] macvlan0: entered allmulticast mode
[  189.078918][T10631] veth1_vlan: entered allmulticast mode
[  189.082308][T10631] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  189.196038][T10640] netlink: 56537 bytes leftover after parsing attributes in process `syz.1.2018'.
[  189.319827][T10649] bridge_slave_1: left allmulticast mode
[  189.322389][T10649] bridge_slave_1: left promiscuous mode
[  189.324995][T10649] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.368277][T10649] bridge_slave_0: left allmulticast mode
[  189.380504][T10649] bridge_slave_0: left promiscuous mode
[  189.384434][T10649] bridge0: port 1(bridge_slave_0) entered disabled state
[  190.221989][T10687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2040'.
[  190.383110][T10695] syzkaller0: entered promiscuous mode
[  190.385150][T10695] syzkaller0: entered allmulticast mode
[  190.461014][T10699] netlink: 14546 bytes leftover after parsing attributes in process `syz.3.2046'.
[  191.395141][T10709] netlink: 'syz.3.2050': attribute type 2 has an invalid length.
[  191.398497][T10709] netlink: 51 bytes leftover after parsing attributes in process `syz.3.2050'.
[  191.571775][T10719] openvswitch: netlink: Flow actions attr not present in new flow.
[  193.025696][T10783] wg2: entered promiscuous mode
[  193.027490][T10783] wg2: entered allmulticast mode
[  193.167185][T10772] netlink: 'syz.3.2079': attribute type 1 has an invalid length.
[  193.170385][T10772] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2079'.
[  193.584595][T10811] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2095'.
[  194.150199][T10832] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2105'.
[  194.162424][T10833] netlink: 'syz.3.2105': attribute type 28 has an invalid length.
[  194.164985][T10833] netlink: 'syz.3.2105': attribute type 29 has an invalid length.
[  194.167780][T10833] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2105'.
[  194.177687][T10832] netlink: 'syz.3.2105': attribute type 9 has an invalid length.
[  194.181864][T10832] netlink: 'syz.3.2105': attribute type 8 has an invalid length.
[  194.185351][T10832] netlink: 143452 bytes leftover after parsing attributes in process `syz.3.2105'.
[  194.360872][T10839] tc_dump_action: action bad kind
[  194.398493][T10841] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2109'.
[  194.404574][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  194.406955][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  194.572140][T10841] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  194.575377][T10841] bond_slave_0: left promiscuous mode
[  194.579661][T10841] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  194.582677][T10841] bond_slave_1: left promiscuous mode
[  194.587313][T10841] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  194.643666][T10841] dummy0: left promiscuous mode
[  194.651504][T10841] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  194.690496][T10841] batadv0: left promiscuous mode
[  194.697072][T10841] bond0 (unregistering): (slave macvlan0): Releasing backup interface
[  194.703222][T10841] veth1_vlan: left allmulticast mode
[  194.708344][T10841] bond0 (unregistering): Released all slaves
[  195.214942][T10855] syzkaller0: entered promiscuous mode
[  195.216912][T10855] syzkaller0: entered allmulticast mode
[  195.430207][T10859] openvswitch: netlink: IP tunnel dst address not specified
[  196.067565][T10872] nbd: must specify an index to disconnect
[  196.582014][T10880] netlink: 'syz.3.2124': attribute type 10 has an invalid length.
[  196.712008][T10882] netlink: 'syz.1.2125': attribute type 10 has an invalid length.
[  196.871320][T10880] team0: Port device  added
[  196.876570][T10882] : (slave c@): Releasing backup interface
[  197.600618][T10938] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2150'.
[  198.847455][T10990] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2170'.
[  198.883121][T10992] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2171'.
[  198.890899][T10992] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2171'.
[  199.028682][T11004] netlink: 'syz.4.2177': attribute type 16 has an invalid length.
[  199.032454][T11004] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2177'.
[  199.124138][T11006] netlink: 'syz.3.2178': attribute type 10 has an invalid length.
[  199.296142][T11016] lo speed is unknown, defaulting to 1000
[  199.298391][T11016] lo speed is unknown, defaulting to 1000
[  199.301849][T11016] lo speed is unknown, defaulting to 1000
[  199.313253][T11016] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  199.342354][T11016] lo speed is unknown, defaulting to 1000
[  199.361505][T11016] lo speed is unknown, defaulting to 1000
[  199.365580][T11016] lo speed is unknown, defaulting to 1000
[  199.724452][T11028] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  199.976211][T11031] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2187'.
[  200.075549][T11037] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2189'.
[  200.087542][T11037] tc_dump_action: action bad kind
[  200.653920][T11074] netlink: 'syz.4.2207': attribute type 10 has an invalid length.
[  200.776378][T11085] netlink: 'syz.3.2212': attribute type 21 has an invalid length.
[  201.650786][T11125] netlink: 'syz.1.2228': attribute type 4 has an invalid length.
[  201.700633][   T54] Bluetooth: hci0: Malformed LE Event: 0x02
[  201.733795][T11132] netlink: 'syz.4.2232': attribute type 3 has an invalid length.
[  201.871619][T11146] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  203.120318][T11180] sock: sock_timestamping_bind_phc: sock not bind to device
[  203.172617][T11183] netlink: 'syz.1.2252': attribute type 27 has an invalid length.
[  203.221816][T11189] netlink: 'syz.3.2257': attribute type 2 has an invalid length.
[  203.225689][T11189] netlink: 51 bytes leftover after parsing attributes in process `syz.3.2257'.
[  203.372054][T11201] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2263'.
[  203.376444][T11201] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2263'.
[  203.752040][T11226] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2275'.
[  203.855920][T11232] __nla_validate_parse: 1 callbacks suppressed
[  203.855933][T11232] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2277'.
[  203.872687][T11232] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2277'.
[  204.081158][T11244] netlink: 'syz.1.2283': attribute type 4 has an invalid length.
[  204.087746][T11244] netlink: 'syz.1.2283': attribute type 2 has an invalid length.
[  204.092878][T11244] netlink: 199288 bytes leftover after parsing attributes in process `syz.1.2283'.
[  204.159814][T11249] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2285'.
[  204.967207][T11256] syz.3.2288: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  204.998399][T11256] CPU: 0 UID: 0 PID: 11256 Comm: syz.3.2288 Not tainted 6.17.0-rc1-syzkaller-00022-g07866544e410-dirty #0 PREEMPT(full) 
[  204.998422][T11256] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  204.998430][T11256] Call Trace:
[  204.998435][T11256]  <TASK>
[  204.998440][T11256]  dump_stack_lvl+0x189/0x250
[  204.998463][T11256]  ? __pfx_dump_stack_lvl+0x10/0x10
[  204.998479][T11256]  ? __pfx__printk+0x10/0x10
[  204.998497][T11256]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  204.998514][T11256]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  204.998530][T11256]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  204.998547][T11256]  warn_alloc+0x214/0x310
[  204.998567][T11256]  ? stack_depot_save_flags+0x40/0x860
[  204.998586][T11256]  ? __pfx_warn_alloc+0x10/0x10
[  204.998631][T11256]  ? kasan_save_track+0x4f/0x80
[  204.998649][T11256]  ? xskq_create+0x56/0x170
[  204.998663][T11256]  ? xsk_init_queue+0xb0/0x110
[  204.998675][T11256]  ? xsk_setsockopt+0x57b/0x8d0
[  204.998692][T11256]  ? perf_trace_run_bpf_submit+0xee/0x170
[  204.998709][T11256]  __vmalloc_node_range_noprof+0x125/0x12f0
[  204.998727][T11256]  ? perf_trace_preemptirq_template+0x280/0x340
[  204.998745][T11256]  ? irqentry_exit+0x74/0x90
[  204.998763][T11256]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  204.998789][T11256]  ? irqentry_exit+0x74/0x90
[  204.998805][T11256]  ? lockdep_hardirqs_on+0x9c/0x150
[  204.998822][T11256]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  204.998847][T11256]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  204.998868][T11256]  vmalloc_user_noprof+0xad/0xf0
[  204.998886][T11256]  ? xskq_create+0xbf/0x170
[  204.998902][T11256]  xskq_create+0xbf/0x170
[  204.998921][T11256]  xsk_init_queue+0xb0/0x110
[  204.998940][T11256]  xsk_setsockopt+0x57b/0x8d0
[  204.998957][T11256]  ? __pfx_xsk_setsockopt+0x10/0x10
[  204.998972][T11256]  ? __pfx_aa_sk_perm+0x10/0x10
[  204.998989][T11256]  ? irqentry_exit+0x74/0x90
[  204.999006][T11256]  ? aa_sock_opt_perm+0xff/0x1b0
[  204.999021][T11256]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  204.999034][T11256]  ? __pfx_xsk_setsockopt+0x10/0x10
[  204.999050][T11256]  do_sock_setsockopt+0x17c/0x1b0
[  204.999074][T11256]  __x64_sys_setsockopt+0x13f/0x1b0
[  204.999094][T11256]  do_syscall_64+0xfa/0x3b0
[  204.999112][T11256]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.999124][T11256]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  204.999141][T11256]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.999152][T11256] RIP: 0033:0x7f869db8ebe9
[  204.999164][T11256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  204.999174][T11256] RSP: 002b:00007f869e911038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  204.999188][T11256] RAX: ffffffffffffffda RBX: 00007f869ddb5fa0 RCX: 00007f869db8ebe9
[  204.999197][T11256] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007
[  204.999205][T11256] RBP: 00007f869dc11e19 R08: 0000000000000004 R09: 0000000000000000
[  204.999213][T11256] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  204.999220][T11256] R13: 00007f869ddb6038 R14: 00007f869ddb5fa0 R15: 00007ffe1bcbcee8
[  204.999241][T11256]  </TASK>
[  205.270346][T11256] Mem-Info:
[  205.271923][T11256] active_anon:21744 inactive_anon:0 isolated_anon:0
[  205.271923][T11256]  active_file:13347 inactive_file:38273 isolated_file:0
[  205.271923][T11256]  unevictable:1768 dirty:303 writeback:0
[  205.271923][T11256]  slab_reclaimable:9933 slab_unreclaimable:53965
[  205.271923][T11256]  mapped:18050 shmem:17763 pagetables:999
[  205.271923][T11256]  sec_pagetables:0 bounce:0
[  205.271923][T11256]  kernel_misc_reclaimable:0
[  205.271923][T11256]  free:269530 free_pcp:20786 free_cma:0
[  205.289946][T11256] Node 0 active_anon:42700kB inactive_anon:0kB active_file:40060kB inactive_file:8312kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:58648kB dirty:676kB writeback:0kB shmem:32908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7620kB pagetables:2300kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  205.302234][T11256] Node 1 active_anon:44072kB inactive_anon:0kB active_file:13328kB inactive_file:144780kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:13552kB dirty:536kB writeback:0kB shmem:37872kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:3908kB pagetables:1628kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  205.332338][T11256] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  205.343706][T11256] lowmem_reserve[]: 0 811 811 811 811
[  205.346974][T11256] Node 0 DMA32 free:313116kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:42700kB inactive_anon:0kB active_file:40060kB inactive_file:8312kB unevictable:3536kB writepending:676kB present:1556484kB managed:830960kB mlocked:0kB bounce:0kB free_pcp:34360kB local_pcp:13380kB free_cma:0kB
[  205.360805][T11256] lowmem_reserve[]: 0 0 0 0 0
[  205.362441][T11256] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  205.389434][T11256] lowmem_reserve[]: 0 0 854 854 854
[  205.391652][T11256] Node 1 Normal free:290768kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:42984kB inactive_anon:0kB active_file:13328kB inactive_file:144780kB unevictable:3536kB writepending:536kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:50716kB local_pcp:20312kB free_cma:0kB
[  205.408958][T11256] lowmem_reserve[]: 0 0 0 0 0
[  205.410791][T11256] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  205.414970][T11256] Node 0 DMA32: 3*4kB (ME) 2*8kB (UM) 2*16kB (ME) 75*32kB (UME) 150*64kB (UE) 152*128kB (UM) 50*256kB (UM) 17*512kB (UME) 8*1024kB (UME) 1*2048kB (U) 61*4096kB (UM) = 313116kB
[  205.423730][T11256] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  205.432962][T11256] Node 1 Normal: 553*4kB (ME) 573*8kB (UME) 564*16kB (UME) 350*32kB (UE) 153*64kB (U) 41*128kB (UM) 2*256kB (U) 32*512kB (UE) 20*1024kB (UE) 17*2048kB (UM) 45*4096kB (UM) = 298572kB
[  205.443674][T11256] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  205.447588][T11256] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  205.455776][T11256] 65983 total pagecache pages
[  205.457848][T11256] 0 pages in swap cache
[  205.460845][T11256] Free swap  = 124996kB
[  205.462705][T11256] Total swap = 124996kB
[  205.464685][T11256] 786301 pages RAM
[  205.466420][T11256] 0 pages HighMem/MovableOnly
[  205.468495][T11256] 241329 pages reserved
[  205.472515][T11256] 0 pages cma reserved
[  205.548500][T11270] netlink: 'syz.3.2294': attribute type 8 has an invalid length.
[  205.569868][T11270] netlink: 'syz.3.2294': attribute type 3 has an invalid length.
[  205.573158][T11270] netlink: 153952 bytes leftover after parsing attributes in process `syz.3.2294'.
[  205.662847][T11281] netlink: 1057 bytes leftover after parsing attributes in process `syz.4.2299'.
[  205.704614][T11288] netlink: 'syz.4.2302': attribute type 4 has an invalid length.
[  205.707298][T11288] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2302'.
[  205.753554][T11294] netlink: 'syz.4.2305': attribute type 21 has an invalid length.
[  205.756331][T11294] netlink: 16166 bytes leftover after parsing attributes in process `syz.4.2305'.
[  205.777714][T11296] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2306'.
[  206.106493][T11312] netlink: 'syz.4.2313': attribute type 1 has an invalid length.
[  206.175235][   T54] Bluetooth: hci0: Malformed LE Event: 0x0d
[  207.276765][T11361] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2336'.
[  207.996809][T11396] netlink: 'syz.4.2352': attribute type 21 has an invalid length.
[  208.612887][T11432] team0: Port device bond0 removed
[  208.624149][T11432] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  208.633149][T11432] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  208.644445][T11432] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  208.652082][T11432] bond0 (unregistering): (slave geneve0): Releasing backup interface
[  208.662237][T11432] bond0 (unregistering): Released all slaves
[  208.873431][T11448] __nla_validate_parse: 3 callbacks suppressed
[  208.873446][T11448] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2377'.
[  211.837586][T11456] openvswitch: netlink: Flow actions attr not present in new flow.
[  211.842246][T11456] syzkaller0: entered promiscuous mode
[  212.094212][T11475] netlink: 147608 bytes leftover after parsing attributes in process `syz.4.2389'.
[  212.098375][T11475] netlink: 62239 bytes leftover after parsing attributes in process `syz.4.2389'.
[  212.523898][T11496] veth1_macvtap: left promiscuous mode
[  212.525904][T11496] macsec0: entered allmulticast mode
[  212.659583][T11502] netlink: 'syz.1.2400': attribute type 1 has an invalid length.
[  212.662890][T11502] netlink: 376 bytes leftover after parsing attributes in process `syz.1.2400'.
[  212.729716][T11510] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2403'.
[  213.305910][T11555] netlink: 'syz.4.2416': attribute type 11 has an invalid length.
[  213.310573][T11555] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2416'.
[  213.442829][T11565] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2419'.
[  213.448173][T11565] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2419'.
[  213.594746][T11575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2422'.
[  213.875185][T11611] netlink: 'syz.4.2428': attribute type 2 has an invalid length.
[  213.887241][T11613] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2429'.
[  213.918658][T11615] netlink: 'syz.1.2430': attribute type 1 has an invalid length.
[  215.007596][T11650] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  215.330987][T11657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2448'.
[  215.415898][T11647] veth0_vlan: entered allmulticast mode
[  215.627926][T11675] netlink: 'syz.1.2457': attribute type 2 has an invalid length.
[  215.632529][T11675] netlink: 199816 bytes leftover after parsing attributes in process `syz.1.2457'.
[  215.692687][T11683] netlink: 'syz.4.2460': attribute type 21 has an invalid length.
[  215.695313][T11683] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2460'.
[  216.033293][T11716] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2477'.
[  216.048174][T11716] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2477'.
[  216.053020][T11716] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2477'.
[  216.279501][T11744] netlink: 'syz.1.2490': attribute type 3 has an invalid length.
[  216.284914][T11744] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2490'.
[  216.357216][T11746] lo speed is unknown, defaulting to 1000
[  216.453714][T11759] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2495'.
[  216.696555][T11773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2497'.
[  217.723437][T11821] netlink: zone id is out of range
[  217.725705][T11821] netlink: get zone limit has 8 unknown bytes
[  217.803138][T11827] netlink: 'syz.1.2511': attribute type 1 has an invalid length.
[  218.337035][T11866] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  218.472796][T11876] netlink: 'syz.3.2535': attribute type 29 has an invalid length.
[  218.616967][T11882] lo speed is unknown, defaulting to 1000
[  218.972589][T11899] netlink: 'syz.4.2545': attribute type 21 has an invalid length.
[  218.975983][T11899] __nla_validate_parse: 6 callbacks suppressed
[  218.975993][T11899] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2545'.
[  219.128454][T11905] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2548'.
[  219.953503][T11945] can: request_module (can-proto-0) failed.
[  220.270046][T11957] netlink: 'syz.4.2568': attribute type 33 has an invalid length.
[  220.272672][T11957] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2568'.
[  220.440622][T11971] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2575'.
[  220.443598][T11971] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2575'.
[  220.447259][T11971] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2575'.
[  220.544830][T11976] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2577'.
[  220.554909][T11978] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2578'.
[  220.670057][T11984] netlink: 'syz.1.2581': attribute type 4 has an invalid length.
[  220.672801][T11984] netlink: 14345 bytes leftover after parsing attributes in process `syz.1.2581'.
[  221.392178][T11998] netlink: 'syz.1.2588': attribute type 23 has an invalid length.
[  221.513750][T12003] netlink: 324 bytes leftover after parsing attributes in process `syz.3.2590'.
[  222.195081][T12034] netlink: 'syz.4.2605': attribute type 22 has an invalid length.
[  223.357338][T12086] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  225.467730][T12153] __nla_validate_parse: 3 callbacks suppressed
[  225.467739][T12153] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2660'.
[  225.500234][T12157] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2661'.
[  226.011749][T12194] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2677'.
[  226.015618][T12193] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2678'.
[  226.021319][T12193] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2678'.
[  226.148163][T12202] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2681'.
[  226.797924][T12214] netlink: 304 bytes leftover after parsing attributes in process `syz.1.2686'.
[  226.918864][   T54] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  227.083398][T12235] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2695'.
[  227.086540][T12235] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2695'.
[  227.090176][T12235] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2695'.
[  227.773958][T12267] netlink: 'syz.4.2711': attribute type 1 has an invalid length.
[  227.874063][T12271] netlink: 'syz.4.2713': attribute type 2 has an invalid length.
[  227.876642][T12271] netlink: 'syz.4.2713': attribute type 1 has an invalid length.
[  228.095230][T12284] netlink: 'syz.4.2718': attribute type 1 has an invalid length.
[  228.097768][T12284] netlink: 'syz.4.2718': attribute type 3 has an invalid length.
[  228.653272][   T54] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4
[  228.785024][T12320] netlink: 'syz.3.2732': attribute type 10 has an invalid length.
[  228.840618][T12324] netlink: 'syz.4.2735': attribute type 3 has an invalid length.
[  229.568712][T12314] delete_channel: no stack
[  229.824123][T12360] openvswitch: netlink: Missing key (keys=40, expected=100)
[  230.133607][   T54] Bluetooth: hci0: unexpected event 0x2c length: 82 > 17
[  230.133623][   T54] Bluetooth: hci0: Ignoring connect complete event for invalid link type
[  230.206858][T12399] netlink: 'syz.4.2771': attribute type 3 has an invalid length.
[  230.210399][T12399] netlink: 'syz.4.2771': attribute type 1 has an invalid length.
[  230.643719][T12438] __nla_validate_parse: 18 callbacks suppressed
[  230.643729][T12438] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.2790'.
[  231.935022][T12487] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.2813'.
[  232.035604][T12497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2818'.
[  233.155448][T12528] lo speed is unknown, defaulting to 1000
[  233.880939][T12553] IPv6: NLM_F_CREATE should be specified when creating new route
[  234.325780][T12570] netlink: 'syz.3.2848': attribute type 10 has an invalid length.
[  234.332820][T12570] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2848'.
[  235.012824][T12576] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.2850'.
[  235.522761][T12603] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2862'.
[  236.644604][   T54] Bluetooth: hci0: unexpected event 0x12 length: 151 > 8
[  236.654461][T12634] netlink: 'syz.1.2874': attribute type 2 has an invalid length.
[  236.660318][T12634] netlink: 137592 bytes leftover after parsing attributes in process `syz.1.2874'.
[  237.315599][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  237.424883][T12691] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2901'.
[  237.428848][T12691] netlink: 'syz.1.2901': attribute type 1 has an invalid length.
[  237.807882][T12700] netlink: 531 bytes leftover after parsing attributes in process `syz.4.2905'.
[  237.865347][T12702] ref_ctr_offset mismatch. inode: 0xf98 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20
[  237.958878][ T5864] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[  238.102282][T12721] netlink: 26 bytes leftover after parsing attributes in process `syz.4.2915'.
[  238.186648][T12728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2917'.
[  238.213800][T12730] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2919'.
[  238.368332][ T5864] Bluetooth: hci1: unexpected event 0x14 length: 15 > 6
[  238.545768][T12760] netlink: 13 bytes leftover after parsing attributes in process `syz.3.2931'.
[  238.915727][T12790] syzkaller1: tun_chr_ioctl cmd 2148553947
[  240.604817][T12818] can: request_module (can-proto-0) failed.
[  240.875337][T12859] netlink: 'syz.4.2969': attribute type 10 has an invalid length.
[  240.879869][T12859] veth1_macvtap: entered promiscuous mode
[  240.882523][T12859] veth1_macvtap: entered allmulticast mode
[  240.885877][T12859] macsec0: left allmulticast mode
[  240.887830][T12859] veth1_macvtap: left allmulticast mode
[  240.892728][T12859] bridge0: port 4(macsec0) entered blocking state
[  240.898411][T12859] bridge0: port 4(macsec0) entered disabled state
[  240.901371][T12859] macsec0: entered allmulticast mode
[  240.903673][T12859] veth1_macvtap: entered allmulticast mode
[  240.907557][T12859] macsec0: entered promiscuous mode
[  240.913142][ T1091] bridge0: port 4(macsec0) entered blocking state
[  240.915364][ T1091] bridge0: port 4(macsec0) entered forwarding state
[  241.055119][T12874] netlink: 11318 bytes leftover after parsing attributes in process `syz.3.2980'.
[  241.147438][T12879] netlink: 'syz.4.2981': attribute type 12 has an invalid length.
[  241.156738][T12879] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2981'.
[  241.315202][T12884] netlink: 'syz.4.2983': attribute type 6 has an invalid length.
[  241.318434][T12884] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2983'.
[  241.395783][ T5864] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4
[  241.836928][T12897] netlink: 'syz.4.2989': attribute type 10 has an invalid length.
[  241.844894][T12897] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2989'.
[  241.883353][T12897] batman_adv: batadv0: Adding interface: virt_wifi0
[  241.892576][T12897] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  241.908011][T12897] batman_adv: batadv0: Interface activated: virt_wifi0
[  242.024618][T12905] netlink: 'syz.3.2992': attribute type 10 has an invalid length.
[  242.034695][T12905] team0: Device veth1_macvtap failed to register rx_handler
[  242.549289][T12939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3005'.
[  242.553151][T12939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3005'.
[  242.662527][T12950] : renamed from hsr0
[  243.025221][T12965] netlink: 'syz.1.3016': attribute type 64 has an invalid length.
[  243.033494][ T5867] lo speed is unknown, defaulting to 1000
[  243.469111][ T5864] Bluetooth: hci0: command 0x0406 tx timeout
[  243.793878][T12988] netlink: 196 bytes leftover after parsing attributes in process `syz.1.3027'.
[  244.927770][T13010] netlink: 'syz.4.3034': attribute type 29 has an invalid length.
[  244.932220][T13010] netlink: 'syz.4.3034': attribute type 29 has an invalid length.
[  244.936216][T13010] netlink: 500 bytes leftover after parsing attributes in process `syz.4.3034'.
[  245.083742][T13030] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3045'.
[  245.115532][T13034] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3048'.
[  245.119339][T13034] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3048'.
[  245.614924][T13070] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3064'.
[  245.657591][T13073] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.3066'.
[  245.747508][T13081] : entered promiscuous mode
[  246.152680][T13103] lo speed is unknown, defaulting to 1000
[  246.525735][T13118] netlink: 'syz.4.3082': attribute type 21 has an invalid length.
[  246.542309][T13118] netlink: 'syz.4.3082': attribute type 15 has an invalid length.
[  246.545500][T13118] IPv6: NLM_F_CREATE should be specified when creating new route
[  246.557303][T13118] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  246.560325][T13118] IPv6: NLM_F_CREATE should be set when creating new route
[  246.563319][T13118] IPv6: NLM_F_CREATE should be set when creating new route
[  246.566266][T13118] IPv6: NLM_F_CREATE should be set when creating new route
[  246.827032][   T54] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4
[  246.853891][T13130] netlink: 'syz.4.3088': attribute type 3 has an invalid length.
[  246.866842][T13130] netlink: 'syz.4.3088': attribute type 1 has an invalid length.
[  246.988294][T13137] netlink: 'syz.4.3091': attribute type 1 has an invalid length.
[  247.042421][T13139] __nla_validate_parse: 5 callbacks suppressed
[  247.042436][T13139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3092'.
[  247.048583][T13139] netlink: 'syz.1.3092': attribute type 1 has an invalid length.
[  247.063574][T13139] netlink: 'syz.1.3092': attribute type 2 has an invalid length.
[  247.067948][T13139] netlink: 'syz.1.3092': attribute type 1 has an invalid length.
[  247.410809][T13161] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3102'.
[  247.467920][T13159] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  247.509640][T13159] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  247.723142][T13186] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3113'.
[  248.587916][T13210] netlink: 'syz.4.3125': attribute type 4 has an invalid length.
[  248.599269][T13210] netlink: 'syz.4.3125': attribute type 10 has an invalid length.
[  248.603684][T13210] team0: Port device dummy0 added
[  248.839330][T13232] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3136'.
[  249.093419][T13245] syzkaller0: entered promiscuous mode
[  249.095318][T13245] syzkaller0: entered allmulticast mode
[  250.063627][T13249] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.3144'.
[  250.073355][T13252] syz.1.3144 (13252) used obsolete PPPIOCDETACH ioctl
[  250.243768][T13267] syzkaller0: entered promiscuous mode
[  250.246128][T13267] syzkaller0: entered allmulticast mode
[  250.327471][T13272] netlink: 948 bytes leftover after parsing attributes in process `syz.3.3152'.
[  250.390001][T13276] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3154'.
[  251.290431][T13275] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  251.292850][T13275] batman_adv: batadv0: Removing interface: batadv_slave_0
[  251.295725][T13275] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  251.298117][T13275] batman_adv: batadv0: Removing interface: batadv_slave_1
[  251.428819][T13302] IPv6: Can't replace route, no match found
[  251.740845][T13328] netlink: 'syz.1.3179': attribute type 1 has an invalid length.
[  251.743925][T13328] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.3179'.
[  251.982452][T13347] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3188'.
[  251.985420][T13347] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3188'.
[  251.990454][T13347] netlink: 'syz.1.3188': attribute type 5 has an invalid length.
[  252.241744][T13353] __nla_validate_parse: 1 callbacks suppressed
[  252.241753][T13353] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3191'.
[  252.247058][T13353] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3191'.
[  252.253026][T13353] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3191'.
[  252.812038][T13381] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3203'.
[  252.815964][T13381] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3203'.
[  253.343336][T13414] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.3218'.
[  253.451058][T13420] netlink: 'syz.3.3221': attribute type 1 has an invalid length.
[  253.485722][T13424] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3223'.
[  253.677351][T13425] delete_channel: no stack
[  253.951924][T13459] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.3237'.
[  254.028700][T13467] bridge0: port 4(macsec0) entered disabled state
[  254.031496][T13467] bridge0: port 3(veth1_to_team) entered disabled state
[  254.034270][T13467] bridge0: port 2(bridge_slave_1) entered disabled state
[  254.037445][T13467] bridge0: port 1(bridge_slave_0) entered disabled state
[  254.049646][T13467] bridge0: entered allmulticast mode
[  254.058117][T13467] macsec0: left allmulticast mode
[  254.062121][T13467] veth1_macvtap: left allmulticast mode
[  254.064109][T13467] macsec0: left promiscuous mode
[  254.066890][T13467] bridge0: port 4(macsec0) entered disabled state
[  254.072130][T13467] veth1_to_team: left allmulticast mode
[  254.074109][T13467] veth1_to_team: left promiscuous mode
[  254.076112][T13467] bridge0: port 3(veth1_to_team) entered disabled state
[  254.076579][T13471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3243'.
[  254.083801][T13467] bridge_slave_1: left allmulticast mode
[  254.085810][T13467] bridge_slave_1: left promiscuous mode
[  254.087892][T13467] bridge0: port 2(bridge_slave_1) entered disabled state
[  254.093697][T13467] bridge_slave_0: left allmulticast mode
[  254.095585][T13467] bridge_slave_0: left promiscuous mode
[  254.098231][T13467] bridge0: port 1(bridge_slave_0) entered disabled state
[  254.126601][T13473] openvswitch: netlink: EtherType 50a is less than min 600
[  254.611134][T13496] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3254'.
[  255.717760][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  255.720680][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  256.770603][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.852634][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.924508][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.991867][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.049060][ T5864] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  257.053596][ T5864] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  257.057305][ T5864] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  257.063013][ T5864] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  257.066760][ T5864] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  257.129925][T13533] lo speed is unknown, defaulting to 1000
[  257.311340][   T13]  (unregistering): (slave geneve0): Releasing backup interface
[  257.464497][   T13]  (unregistering): (slave bond_slave_1): Releasing backup interface
[  257.469798][   T13]  (unregistering): Released all slaves
[  257.548037][   T13] : left promiscuous mode
[  257.572832][T13533] chnl_net:caif_netlink_parms(): no params data found
[  257.644792][T13533] bridge0: port 1(bridge_slave_0) entered blocking state
[  257.647666][T13533] bridge0: port 1(bridge_slave_0) entered disabled state
[  257.650978][T13533] bridge_slave_0: entered allmulticast mode
[  257.654450][T13533] bridge_slave_0: entered promiscuous mode
[  257.658398][T13533] bridge0: port 2(bridge_slave_1) entered blocking state
[  257.662026][T13533] bridge0: port 2(bridge_slave_1) entered disabled state
[  257.665465][T13533] bridge_slave_1: entered allmulticast mode
[  257.670123][T13533] bridge_slave_1: entered promiscuous mode
[  257.713162][T13533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  257.721285][T13533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  257.751698][T13533] team0: Port device team_slave_0 added
[  257.777440][T13533] team0: Port device team_slave_1 added
[  257.800731][T13533] batman_adv: batadv0: Adding interface: batadv_slave_0
[  257.803104][T13533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  257.812287][T13533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  257.822010][T13533] batman_adv: batadv0: Adding interface: batadv_slave_1
[  257.824304][T13533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  257.833315][T13533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  257.846413][   T13] hsr_slave_0: left promiscuous mode
[  257.850302][   T13] D`: left promiscuous mode
[  257.853047][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  257.856224][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  257.861604][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  257.864784][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  257.877033][   T13] veth1_vlan: left promiscuous mode
[  257.879794][   T13] veth0_vlan: left promiscuous mode
[  258.177514][T13545] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3260'.
[  258.207957][T13547] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.3261'.
[  258.211825][T13547] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  258.215170][T13547] openvswitch: netlink: Message has 6324 unknown bytes.
[  258.460370][ T5864] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  258.464700][ T5864] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  258.468267][ T5864] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  258.473166][ T5864] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  258.476562][ T5864] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  258.530689][T13556] netlink: 'syz.4.3265': attribute type 2 has an invalid length.
[  258.557044][   T13] team0 (unregistering): Port device team_slave_1 removed
[  258.586409][   T13] team0 (unregistering): Port device team_slave_0 removed
[  258.809403][    T9] lo speed is unknown, defaulting to 1000
[  258.811684][    T9] syz2: Port: 1 Link DOWN
[  258.849959][T13533] hsr_slave_0: entered promiscuous mode
[  258.853902][T13533] hsr_slave_1: entered promiscuous mode
[  259.149020][   T54] Bluetooth: hci1: command tx timeout
[  259.423033][T13533] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  259.436023][T13554] chnl_net:caif_netlink_parms(): no params data found
[  259.445509][T13533] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  259.464715][T13533] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  259.472460][T13533] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  259.561909][T13554] bridge0: port 1(bridge_slave_0) entered blocking state
[  259.564955][T13554] bridge0: port 1(bridge_slave_0) entered disabled state
[  259.567772][T13554] bridge_slave_0: entered allmulticast mode
[  259.572167][T13554] bridge_slave_0: entered promiscuous mode
[  259.581212][T13554] bridge0: port 2(bridge_slave_1) entered blocking state
[  259.584477][T13554] bridge0: port 2(bridge_slave_1) entered disabled state
[  259.587376][T13554] bridge_slave_1: entered allmulticast mode
[  259.590961][T13554] bridge_slave_1: entered promiscuous mode
[  259.636481][T13554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  259.651094][T13554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  259.694445][T13554] team0: Port device team_slave_0 added
[  259.712985][T13554] team0: Port device team_slave_1 added
[  259.745507][T13554] batman_adv: batadv0: Adding interface: batadv_slave_0
[  259.748037][T13554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  259.757969][T13554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  259.762948][T13554] batman_adv: batadv0: Adding interface: batadv_slave_1
[  259.765238][T13554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  259.775821][T13554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  259.822469][T13533] 8021q: adding VLAN 0 to HW filter on device bond0
[  259.830179][T13554] hsr_slave_0: entered promiscuous mode
[  259.832613][T13554] hsr_slave_1: entered promiscuous mode
[  259.834943][T13554] debugfs: 'hsr0' already exists in 'hsr'
[  259.837001][T13554] Cannot create hsr debugfs directory
[  259.879257][T13533] 8021q: adding VLAN 0 to HW filter on device team0
[  259.894078][ T7064] bridge0: port 1(bridge_slave_0) entered blocking state
[  259.896947][ T7064] bridge0: port 1(bridge_slave_0) entered forwarding state
[  259.912585][ T7064] bridge0: port 2(bridge_slave_1) entered blocking state
[  259.914867][ T7064] bridge0: port 2(bridge_slave_1) entered forwarding state
[  260.013199][T13554] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  260.021500][T13554] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  260.032533][T13554] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  260.044405][T13554] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  260.115497][T13554] 8021q: adding VLAN 0 to HW filter on device bond0
[  260.138008][T13554] 8021q: adding VLAN 0 to HW filter on device team0
[  260.153274][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  260.156013][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  260.172264][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  260.175042][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  260.209527][T13533] 8021q: adding VLAN 0 to HW filter on device batadv0
[  260.223092][T13554] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  260.402739][T13554] 8021q: adding VLAN 0 to HW filter on device batadv0
[  260.511652][   T54] Bluetooth: hci2: command tx timeout
[  260.539998][T13533] veth0_vlan: entered promiscuous mode
[  260.548329][T13533] veth1_vlan: entered promiscuous mode
[  260.576488][T13533] veth0_macvtap: entered promiscuous mode
[  260.583106][T13533] veth1_macvtap: entered promiscuous mode
[  260.608455][T13533] batman_adv: batadv0: Interface activated: batadv_slave_0
[  260.625366][T13533] batman_adv: batadv0: Interface activated: batadv_slave_1
[  260.637848][ T5882] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  260.642144][ T5882] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  260.645889][ T5882] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  260.651516][ T5882] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  260.751657][T13554] veth0_vlan: entered promiscuous mode
[  260.756687][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  260.762939][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  260.784485][T13554] veth1_vlan: entered promiscuous mode
[  260.803353][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  260.807784][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  260.834741][T13554] veth0_macvtap: entered promiscuous mode
[  260.843312][T13554] veth1_macvtap: entered promiscuous mode
[  260.854885][T13554] batman_adv: batadv0: Interface activated: batadv_slave_0
[  260.879808][T13554] batman_adv: batadv0: Interface activated: batadv_slave_1
[  260.905813][   T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  260.913841][   T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  260.930303][   T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  260.944406][   T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  261.039510][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  261.042926][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  261.106136][ T7083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  261.109944][ T7083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  261.130347][T13624] netlink: 88 bytes leftover after parsing attributes in process `syz.5.3278'.
[  261.229210][   T54] Bluetooth: hci1: command tx timeout
[  261.834184][T13656] ==================================================================
[  261.836898][T13656] BUG: KASAN: slab-use-after-free in __xfrm_state_lookup+0x6ad/0x8d0
[  261.839534][T13656] Read of size 2 at addr ffff888027fee542 by task syz.4.3292/13656
[  261.842901][T13656] 
[  261.843727][T13656] CPU: 0 UID: 0 PID: 13656 Comm: syz.4.3292 Not tainted 6.17.0-rc1-syzkaller-00022-g07866544e410-dirty #0 PREEMPT(full) 
[  261.843738][T13656] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  261.843743][T13656] Call Trace:
[  261.843747][T13656]  <TASK>
[  261.843751][T13656]  dump_stack_lvl+0x189/0x250
[  261.843764][T13656]  ? __kasan_check_byte+0x12/0x40
[  261.843776][T13656]  ? __pfx_dump_stack_lvl+0x10/0x10
[  261.843784][T13656]  ? lock_release+0x4b/0x3e0
[  261.843796][T13656]  ? __virt_addr_valid+0x4a5/0x5c0
[  261.843806][T13656]  print_report+0xca/0x240
[  261.843814][T13656]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  261.843825][T13656]  kasan_report+0x118/0x150
[  261.843835][T13656]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  261.843846][T13656]  __xfrm_state_lookup+0x6ad/0x8d0
[  261.843858][T13656]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  261.843872][T13656]  xfrm_input_state_lookup+0x6e9/0xa60
[  261.843885][T13656]  ? xfrm_input_state_lookup+0xcf/0xa60
[  261.843896][T13656]  ? __pfx_xfrm_input_state_lookup+0x10/0x10
[  261.843907][T13656]  ? xfrm_parse_spi+0x300/0x680
[  261.843916][T13656]  xfrm_input+0x425c/0x72c0
[  261.843927][T13656]  ? vti6_input_proto+0x56e/0x720
[  261.843936][T13656]  xfrm6_ah_rcv+0xa9/0x220
[  261.843944][T13656]  ? __pfx_xfrm6_ah_rcv+0x10/0x10
[  261.843950][T13656]  ip6_protocol_deliver_rcu+0xe0b/0x15c0
[  261.843964][T13656]  ip6_input_finish+0x191/0x370
[  261.843975][T13656]  NF_HOOK+0x30c/0x3a0
[  261.843983][T13656]  ? __pfx_ip6_input_finish+0x10/0x10
[  261.843992][T13656]  ? NF_HOOK+0x9a/0x3a0
[  261.844001][T13656]  ? __pfx_NF_HOOK+0x10/0x10
[  261.844009][T13656]  ? __pfx_ip6_input_finish+0x10/0x10
[  261.844020][T13656]  ip6_input+0x16a/0x270
[  261.844029][T13656]  ? ip6_input+0x23/0x270
[  261.844038][T13656]  NF_HOOK+0x30c/0x3a0
[  261.844046][T13656]  ? skb_orphan+0x4f/0xd0
[  261.844055][T13656]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  261.844063][T13656]  ? NF_HOOK+0x9a/0x3a0
[  261.844072][T13656]  ? __pfx_NF_HOOK+0x10/0x10
[  261.844081][T13656]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  261.844091][T13656]  __netif_receive_skb+0xd3/0x380
[  261.844102][T13656]  ? netif_receive_skb+0x115/0x790
[  261.844110][T13656]  netif_receive_skb+0x1cb/0x790
[  261.844118][T13656]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  261.844126][T13656]  ? __pfx_netif_receive_skb+0x10/0x10
[  261.844134][T13656]  ? perf_trace_preemptirq_template+0xa3/0x340
[  261.844145][T13656]  ? tun_rx_batched+0x160/0x730
[  261.844153][T13656]  tun_rx_batched+0x1b9/0x730
[  261.844159][T13656]  ? __lock_acquire+0xab9/0xd20
[  261.844169][T13656]  ? __pfx_tun_rx_batched+0x10/0x10
[  261.844176][T13656]  ? tun_get_user+0x266c/0x3e20
[  261.844185][T13656]  tun_get_user+0x2aa2/0x3e20
[  261.844193][T13656]  ? tun_get_user+0x266c/0x3e20
[  261.844200][T13656]  ? aa_file_perm+0x44d/0x1550
[  261.844207][T13656]  ? __pfx_tun_get_user+0x10/0x10
[  261.844213][T13656]  ? __futex_wait+0x34f/0x3e0
[  261.844224][T13656]  ? __pfx___futex_wait+0x10/0x10
[  261.844235][T13656]  ? ref_tracker_alloc+0x318/0x460
[  261.844245][T13656]  ? __lock_acquire+0xab9/0xd20
[  261.844255][T13656]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  261.844266][T13656]  ? tun_get+0x1c/0x2f0
[  261.844273][T13656]  ? tun_get+0x1c/0x2f0
[  261.844278][T13656]  ? tun_get+0x1c/0x2f0
[  261.844286][T13656]  tun_chr_write_iter+0x113/0x200
[  261.844296][T13656]  vfs_write+0x5c9/0xb30
[  261.844306][T13656]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  261.844317][T13656]  ? __pfx_vfs_write+0x10/0x10
[  261.844327][T13656]  ? __fget_files+0x2a/0x420
[  261.844334][T13656]  ksys_write+0x145/0x250
[  261.844343][T13656]  ? __pfx_ksys_write+0x10/0x10
[  261.844352][T13656]  ? rcu_is_watching+0x15/0xb0
[  261.844360][T13656]  ? do_syscall_64+0xbe/0x3b0
[  261.844370][T13656]  do_syscall_64+0xfa/0x3b0
[  261.844380][T13656]  ? lockdep_hardirqs_on+0x9c/0x150
[  261.844389][T13656]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  261.844396][T13656]  ? exc_page_fault+0x9f/0xf0
[  261.844405][T13656]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  261.844411][T13656] RIP: 0033:0x7fd29298ebe9
[  261.844418][T13656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  261.844425][T13656] RSP: 002b:00007fd293856038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  261.844434][T13656] RAX: ffffffffffffffda RBX: 00007fd292bb5fa0 RCX: 00007fd29298ebe9
[  261.844439][T13656] RDX: 000000000000fdef RSI: 0000200000000180 RDI: 00000000000000c8
[  261.844444][T13656] RBP: 00007fd292a11e19 R08: 0000000000000000 R09: 0000000000000000
[  261.844448][T13656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  261.844453][T13656] R13: 00007fd292bb6038 R14: 00007fd292bb5fa0 R15: 00007ffc2cf54be8
[  261.844462][T13656]  </TASK>
[  261.844464][T13656] 
[  262.010227][T13656] Allocated by task 12931:
[  262.011985][T13656]  kasan_save_track+0x3e/0x80
[  262.014186][T13656]  __kasan_slab_alloc+0x6c/0x80
[  262.015837][T13656]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  262.017698][T13656]  xfrm_state_alloc+0x24/0x2f0
[  262.019226][T13656]  pfkey_add+0x6e4/0x2e00
[  262.020533][T13656]  pfkey_sendmsg+0xbfe/0x1090
[  262.022199][T13656]  __sock_sendmsg+0x21c/0x270
[  262.023693][T13656]  ____sys_sendmsg+0x505/0x830
[  262.025225][T13656]  ___sys_sendmsg+0x21f/0x2a0
[  262.026766][T13656]  __x64_sys_sendmsg+0x19b/0x260
[  262.028729][T13656]  do_syscall_64+0xfa/0x3b0
[  262.030287][T13656]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  262.032167][T13656] 
[  262.032952][T13656] Freed by task 9:
[  262.034225][T13656]  kasan_save_track+0x3e/0x80
[  262.036184][T13656]  kasan_save_free_info+0x46/0x50
[  262.038259][T13656]  __kasan_slab_free+0x5b/0x80
[  262.040261][T13656]  kmem_cache_free+0x18f/0x400
[  262.042229][T13656]  xfrm_state_gc_task+0x52d/0x6b0
[  262.044347][T13656]  process_scheduled_works+0xae1/0x17b0
[  262.046629][T13656]  worker_thread+0x8a0/0xda0
[  262.048358][T13656]  kthread+0x711/0x8a0
[  262.049708][T13656]  ret_from_fork+0x3fc/0x770
[  262.051265][T13656]  ret_from_fork_asm+0x1a/0x30
[  262.052733][T13656] 
[  262.053469][T13656] The buggy address belongs to the object at ffff888027fee400
[  262.053469][T13656]  which belongs to the cache xfrm_state of size 928
[  262.058646][T13656] The buggy address is located 322 bytes inside of
[  262.058646][T13656]  freed 928-byte region [ffff888027fee400, ffff888027fee7a0)
[  262.064098][T13656] 
[  262.065095][T13656] The buggy address belongs to the physical page:
[  262.067740][T13656] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888027fee400 pfn:0x27fec
[  262.071673][T13656] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  262.074987][T13656] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  262.078068][T13656] page_type: f5(slab)
[  262.079679][T13656] raw: 00fff00000000040 ffff888104a1d8c0 dead000000000122 0000000000000000
[  262.083077][T13656] raw: ffff888027fee400 00000000800e0008 00000000f5000000 0000000000000000
[  262.085960][T13656] head: 00fff00000000040 ffff888104a1d8c0 dead000000000122 0000000000000000
[  262.089064][T13656] head: ffff888027fee400 00000000800e0008 00000000f5000000 0000000000000000
[  262.091723][T13656] head: 00fff00000000002 ffffea00009ffb01 00000000ffffffff 00000000ffffffff
[  262.094780][T13656] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  262.097670][T13656] page dumped because: kasan: bad access detected
[  262.099881][T13656] page_owner tracks the page as allocated
[  262.101696][T13656] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6081, tgid 6079 (syz.2.76), ts 66299595015, free_ts 64861399081
[  262.107762][T13656]  post_alloc_hook+0x240/0x2a0
[  262.109368][T13656]  get_page_from_freelist+0x21e4/0x22c0
[  262.111165][T13656]  __alloc_frozen_pages_noprof+0x181/0x370
[  262.113108][T13656]  alloc_pages_mpol+0x232/0x4a0
[  262.114811][T13656]  allocate_slab+0x8a/0x370
[  262.116330][T13656]  ___slab_alloc+0xbeb/0x1410
[  262.117842][T13656]  kmem_cache_alloc_noprof+0x283/0x3c0
[  262.119707][T13656]  xfrm_state_alloc+0x24/0x2f0
[  262.121274][T13656]  xfrm_add_sa+0x17d1/0x4070
[  262.122823][T13656]  xfrm_user_rcv_msg+0x7a3/0xab0
[  262.124444][T13656]  netlink_rcv_skb+0x208/0x470
[  262.125960][T13656]  xfrm_netlink_rcv+0x79/0x90
[  262.127510][T13656]  netlink_unicast+0x82f/0x9e0
[  262.129095][T13656]  netlink_sendmsg+0x805/0xb30
[  262.130694][T13656]  __sock_sendmsg+0x21c/0x270
[  262.132278][T13656]  ____sys_sendmsg+0x505/0x830
[  262.133788][T13656] page last free pid 5866 tgid 5866 stack trace:
[  262.135988][T13656]  __free_frozen_pages+0xbc4/0xd30
[  262.137830][T13656]  __put_partials+0x156/0x1a0
[  262.139696][T13656]  put_cpu_partial+0x17c/0x250
[  262.141446][T13656]  __slab_free+0x2d5/0x3c0
[  262.143088][T13656]  qlist_free_all+0x97/0x140
[  262.144570][T13656]  kasan_quarantine_reduce+0x148/0x160
[  262.146364][T13656]  __kasan_slab_alloc+0x22/0x80
[  262.148088][T13656]  kmem_cache_alloc_lru_noprof+0x1c6/0x3d0
[  262.150169][T13656]  sock_alloc_inode+0x28/0xc0
[  262.151657][T13656]  alloc_inode+0x6a/0x1b0
[  262.153301][T13656]  __sock_create+0x12d/0x9f0
[  262.155037][T13656]  __sys_socket+0xd7/0x1b0
[  262.156515][T13656]  __x64_sys_socket+0x7a/0x90
[  262.158201][T13656]  do_syscall_64+0xfa/0x3b0
[  262.159901][T13656]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  262.161868][T13656] 
[  262.162689][T13656] Memory state around the buggy address:
[  262.164714][T13656]  ffff888027fee400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  262.167716][T13656]  ffff888027fee480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  262.170439][T13656] >ffff888027fee500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  262.173230][T13656]                                            ^
[  262.175248][T13656]  ffff888027fee580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  262.177934][T13656]  ffff888027fee600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  262.180660][T13656] ==================================================================
[  262.183506][T13656] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  262.186502][T13656] CPU: 0 UID: 0 PID: 13656 Comm: syz.4.3292 Not tainted 6.17.0-rc1-syzkaller-00022-g07866544e410-dirty #0 PREEMPT(full) 
[  262.191775][T13656] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  262.195617][T13656] Call Trace:
[  262.196878][T13656]  <TASK>
[  262.198011][T13656]  dump_stack_lvl+0x99/0x250
[  262.199776][T13656]  ? __asan_memcpy+0x40/0x70
[  262.201517][T13656]  ? __pfx_dump_stack_lvl+0x10/0x10
[  262.203451][T13656]  ? __pfx__printk+0x10/0x10
[  262.205183][T13656]  vpanic+0x281/0x750
[  262.206694][T13656]  ? __pfx_vpanic+0x10/0x10
[  262.208356][T13656]  ? irqentry_exit+0x74/0x90
[  262.210063][T13656]  panic+0xb9/0xc0
[  262.211401][T13656]  ? __pfx_panic+0x10/0x10
[  262.213088][T13656]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  262.215269][T13656]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  262.217675][T13656]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  262.219685][T13656]  check_panic_on_warn+0x89/0xb0
[  262.221555][T13656]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  262.223409][T13656]  end_report+0x78/0x160
[  262.224985][T13656]  kasan_report+0x129/0x150
[  262.226716][T13656]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  262.228664][T13656]  __xfrm_state_lookup+0x6ad/0x8d0
[  262.230619][T13656]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  262.232751][T13656]  xfrm_input_state_lookup+0x6e9/0xa60
[  262.234712][T13656]  ? xfrm_input_state_lookup+0xcf/0xa60
[  262.236724][T13656]  ? __pfx_xfrm_input_state_lookup+0x10/0x10
[  262.239037][T13656]  ? xfrm_parse_spi+0x300/0x680
[  262.240880][T13656]  xfrm_input+0x425c/0x72c0
[  262.242615][T13656]  ? vti6_input_proto+0x56e/0x720
[  262.244478][T13656]  xfrm6_ah_rcv+0xa9/0x220
[  262.246183][T13656]  ? __pfx_xfrm6_ah_rcv+0x10/0x10
[  262.248093][T13656]  ip6_protocol_deliver_rcu+0xe0b/0x15c0
[  262.250217][T13656]  ip6_input_finish+0x191/0x370
[  262.252064][T13656]  NF_HOOK+0x30c/0x3a0
[  262.253550][T13656]  ? __pfx_ip6_input_finish+0x10/0x10
[  262.255465][T13656]  ? NF_HOOK+0x9a/0x3a0
[  262.257066][T13656]  ? __pfx_NF_HOOK+0x10/0x10
[  262.258832][T13656]  ? __pfx_ip6_input_finish+0x10/0x10
[  262.260853][T13656]  ip6_input+0x16a/0x270
[  262.262415][T13656]  ? ip6_input+0x23/0x270
[  262.264040][T13656]  NF_HOOK+0x30c/0x3a0
[  262.265577][T13656]  ? skb_orphan+0x4f/0xd0
[  262.267239][T13656]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  262.269212][T13656]  ? NF_HOOK+0x9a/0x3a0
[  262.270807][T13656]  ? __pfx_NF_HOOK+0x10/0x10
[  262.272544][T13656]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  262.274470][T13656]  __netif_receive_skb+0xd3/0x380
[  262.276387][T13656]  ? netif_receive_skb+0x115/0x790
[  262.278340][T13656]  netif_receive_skb+0x1cb/0x790
[  262.280222][T13656]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  262.282410][T13656]  ? __pfx_netif_receive_skb+0x10/0x10
[  262.284452][T13656]  ? perf_trace_preemptirq_template+0xa3/0x340
[  262.286779][T13656]  ? tun_rx_batched+0x160/0x730
[  262.288620][T13656]  tun_rx_batched+0x1b9/0x730
[  262.290401][T13656]  ? __lock_acquire+0xab9/0xd20
[  262.292249][T13656]  ? __pfx_tun_rx_batched+0x10/0x10
[  262.294193][T13656]  ? tun_get_user+0x266c/0x3e20
[  262.296041][T13656]  tun_get_user+0x2aa2/0x3e20
[  262.297833][T13656]  ? tun_get_user+0x266c/0x3e20
[  262.299689][T13656]  ? aa_file_perm+0x44d/0x1550
[  262.301485][T13656]  ? __pfx_tun_get_user+0x10/0x10
[  262.303378][T13656]  ? __futex_wait+0x34f/0x3e0
[  262.305178][T13656]  ? __pfx___futex_wait+0x10/0x10
[  262.307102][T13656]  ? ref_tracker_alloc+0x318/0x460
[  262.309038][T13656]  ? __lock_acquire+0xab9/0xd20
[  262.310878][T13656]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  262.312925][T13656]  ? tun_get+0x1c/0x2f0
[  262.314463][T13656]  ? tun_get+0x1c/0x2f0
[  262.315979][T13656]  ? tun_get+0x1c/0x2f0
[  262.317564][T13656]  tun_chr_write_iter+0x113/0x200
[  262.319496][T13656]  vfs_write+0x5c9/0xb30
[  262.321039][T13656]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  262.323131][T13656]  ? __pfx_vfs_write+0x10/0x10
[  262.324954][T13656]  ? __fget_files+0x2a/0x420
[  262.326720][T13656]  ksys_write+0x145/0x250
[  262.328352][T13656]  ? __pfx_ksys_write+0x10/0x10
[  262.330209][T13656]  ? rcu_is_watching+0x15/0xb0
[  262.332041][T13656]  ? do_syscall_64+0xbe/0x3b0
[  262.333827][T13656]  do_syscall_64+0xfa/0x3b0
[  262.335532][T13656]  ? lockdep_hardirqs_on+0x9c/0x150
[  262.337489][T13656]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  262.339785][T13656]  ? exc_page_fault+0x9f/0xf0
[  262.341622][T13656]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  262.343860][T13656] RIP: 0033:0x7fd29298ebe9
[  262.345534][T13656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  262.352711][T13656] RSP: 002b:00007fd293856038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  262.355828][T13656] RAX: ffffffffffffffda RBX: 00007fd292bb5fa0 RCX: 00007fd29298ebe9
[  262.358769][T13656] RDX: 000000000000fdef RSI: 0000200000000180 RDI: 00000000000000c8
[  262.361709][T13656] RBP: 00007fd292a11e19 R08: 0000000000000000 R09: 0000000000000000
[  262.364575][T13656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  262.367517][T13656] R13: 00007fd292bb6038 R14: 00007fd292bb5fa0 R15: 00007ffc2cf54be8
[  262.370344][T13656]  </TASK>
[  262.372204][T13656] Kernel Offset: disabled
[  262.373630][T13656] Rebooting in 86400 seconds..

VM DIAGNOSIS:
10:19:43  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000032 RBX=0000000000000032 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001f77 RDI=0000000000001f78 RBP=00000000000003f8 RSP=ffffc90003916870
R8 =ffff888020e08237 R9 =1ffff110041c1046 R10=dffffc0000000000 R11=ffffffff854ef730
R12=dffffc0000000000 R13=ffffffff99af98f7 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854ef7ac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fd2938566c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000020000000f000 CR3=000000002a0c8000 CR4=000006f0
DR0=0000200000000300 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fd292b87498 00007fd292b87470 XMM03=00007fd292b874a8 00007fd292b874a0
XMM04=00007fd2936ed100 00007fd292b87460 XMM05=00007fd292b87478 00007fd292b874c0
XMM06=00007fd292b874b8 00007fd292b874b0 XMM07=00007fd292b874a8 00007fd292b874a0
XMM08=0000000000000000 00007fd292a12ee7 XMM09=0000000000000000 00007fd292a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=7984251a75547300 RBX=ffffffff81968308 RCX=7984251a75547300 RDX=0000000000000001
RSI=ffffffff8d9b6dcb RDI=ffffffff8be33300 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa37e30 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d0000
RIP=ffffffff8b7933f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b32c1bff8 CR3=0000000039bae000 CR4=000006f0
DR0=0000200000000300 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fd292a12e53
XMM06=0000000000000000 00007fd292a12e4d XMM07=0000000000000000 00007fd292a12e61
XMM08=0000000000000000 00007fd292a12ee7 XMM09=0000000000000000 00007fd292a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
